Steward requests/Checkuser/2012-04

Please do not post any new comments on this page. This is a discussion archive first created in April 2012, although the comments contained were likely posted before and after this date. See current discussion.

Requests

some-spammers@it.wikinews

Status: Done

List of users: SimsimiUy (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); ErmannoLongo (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); PeterFin (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); ShannonAustin (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 112.205.235.54 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 124.6.181.176/28 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 124.6.181.189 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 124.6.181.181 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 124.6.181.183 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); JohnStung (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): All but JohnStung have spammed in n:it:Project:Bar, inserting – out of context and disruptive – external links masked as plaintext by means of html code. Registered users seem to follow a single-shot-and-leave tactic, even not blocked, but sometimes cross-wiki in short timespan (ShannonAustin and SimsimiUy). Maybe an organized spamming campaign that, in wikis, targets at high visibility pages that must necessarily remain unprotected. 124.6.181.* have spammed in July/August 2011 (maybe out of sight of this CU) and that led to a short local range block after which they stopped; 112.205.235.54 came in October 2011, first with the same html template of previous IPs and then with simple external link; now (February/March 2012) there are the registered users with the same html template and single-shot tactics. JohnStung hit mw:Help talk:Contents with same tactics. It's likely that there are many other users scattered across projects and languages.
Question is: is here a single spammer or a small local organization that I can block locally via ip-range without interfere with good edits that can come from there to other wikis — or maybe whatelse needing global blocks ? Or could it be some malware ? -- Codicorumus « msg 14:37, 1 April 2012 (UTC)

Unrelated The data shows no relationships, sorry. fr33kman 16:55, 1 April 2012 (UTC)

Thanks. We'll keep patrolling on it. -- Codicorumus « msg 06:08, 2 April 2012 (UTC)

Andregoes@pt.wikipedia

Status: Done

List of users: Russow (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Andregoes (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Juliano Torres (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): Behavior similar to edit pages.. Hallel^talk 23:07, 3 April 2012 (UTC)

Unrelated --Vituzzu (talk) 23:21, 3 April 2012 (UTC)

乌拉跨黑@zh.wikipedia

Status: Done

List of users: 乌拉跨黑 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 乌立跨氪 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Bencum (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:wp:LHLS

Reason(s): Excuse me, there are some suspected sockpuppets which have been blocked by local sysops, please confirm them. Because their edit time seems not to be consistent with him (China, UTC+8). --Makecat (talk) 10:41, 3 April 2012 (UTC)

The following accounts are socks of Bencum:

Bencum

超光速是真理

Guidetruly

The following accounts are socks of 乌拉跨黑:

乌拉跨黑

偷食總司令

These two groups are

Unrelated to each other or to 乌立跨氪 . Ruslik (talk) 07:58, 4 April 2012 (UTC)

Sdee@zh.wikipedia

Status: Done

List of users: Sdee (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Ronochen (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Inhins (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 202.175.175.208/28 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 202.175.175.224/29 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 202.175.175.218 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 116.193.8.0/21 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:WP:DYKC

Reason(s): Inhins and Ronochen act in very similiar way in recent weeks, such as helping Sdee (giving barnstars to Sdee[1], voting

Support to Sdee's DYK nomination when near the end of the voting to make it pass[2][3]), doing something affacting me (e.g. making attack on me[4], unreasonably marking substub template to articles those I created[5][6], etc). In past CheckUser result, it was found that proxy is used. Additionally, it is known that the above IPs are the network in Sdee's college (ref [7], showing the descr of IP "DU-iftedu", in which "iftedu" is the code for the college). Therefore, I suspect that Sdee is at least using Inhins and Ronochen at the collage network to violate voting rules and in order to avoid CU. Please check the 3 accounts and, if possible, the IPs also. Thank you very much! --CDIP No.150 repair meter 08:34, 4 April 2012 (UTC)

Unrelated fr33kman 23:20, 5 April 2012 (UTC)

Carro Voador@pt.wikipedia

Status: Done

List of users: Carro Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Cachoeira Branca (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Cocheira Branca (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Corsa Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); DeLorean Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Emissoras de TV (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jornal do Bóris (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): Contour lock. All suspicion of being blocked by DUCK. All that is needed to be done to confirm a greater lock on the account page (Carro Voador). Sorry for my bad English.Érico ^msg 21:32, 4 April 2012 (UTC)

All accounts are most

Likely related to eachother. I'd advice you to protect the articles as a range block isn't possible. Trijnstel_talk 18:41, 6 April 2012 (UTC)

Arthur Chevailier@pt.wikipedia

Status: Done

List of users: Arthur Chevailier (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); MaîtreSock (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Standard editions. Moreover, translating "Maître" wound up the "master" = "MestreSock." Please compare with the standard editions of users exposed here.Érico ^msg 22:43, 4 April 2012 (UTC)

Confirmed. Two socks: MasterSock and MaîtreSock. Trijnstel_talk 18:17, 6 April 2012 (UTC)

Gakma@zh.wikipedia

Status: Done

List of users: Gakma (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Specialgood (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Rightpeople (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:User:Miroir/TVB項目破壞者, w:zh:Category:Specialgood的維基用戶分身

Reason(s): Previous CU results show that Specialgood, Goodwriter, etc. are related. However, it was impossible to prove that Rightpeople is a sockpuppet of Specialgood and the others. All the mentioned users are eventually blocked because of their significant similar contributions. Gakma is a new user whose contribution is very similar to the users I mentioned, can you please check whether Gakma is related to either Specialgood or Rightpeople? Thanks in advance! --Miroir (talk) 11:30, 6 April 2012 (UTC)

Gakma is a

Confirmed sock of Rightpeople. I locally blocked the underlying IP address for 1 month. Trijnstel_talk 18:25, 6 April 2012 (UTC)

RedMosQ, Shut up!@ko.wikipedia(2)

Status: Not done

List of users: RedMosQ, Shut up! (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 쵀ㅜㅎㅇㅁㄷ ㅑㄴ 앻 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Albamhanddae (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 에스파냐 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hyolee2 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hyolee2, kowiki is not Subordinate petal of jawiki. (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 에멜무지로 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Concept (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 백꼬리 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Greenlife (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): I want to check this user. --112.168.168.93 05:11, 1 April 2012 (UTC)

Hi! Why do you want to check? Is it to block them if they are the same? In that case, please identify yourself as a Korean 관리자 (Administrator). If not, please specify why you do need the information. Thanks in advance! - Andre Engels (talk) 08:03, 1 April 2012 (UTC)

I want to know and I have to show this information's result in w:ko:백:다중 계정 검사 요청#사용자:RedMosQ, Shut up! 관련 다중계정 검사 요청. --112.168.168.93 09:14, 1 April 2012 (UTC)

Not done. 'I want to know' is no reason, and the given link seems to be a discussion about whether to do this request, and the outcome is not clearly positive. - Andre Engels (talk) 20:06, 1 April 2012 (UTC)

sorry, we dont agree. this chack and Idont know this chackuser. please do notdone please--DangSunM (talk) 23:05, 6 April 2012 (UTC)

To do a checkuser we need a better justification than a request. Evidence of the problems, examples are multiple cases of spamming, or multiple cases of abuse; or abuse of SULin a voting process. billinghurst sDrewth 13:18, 7 April 2012 (UTC)

Unypoly@ko.wikipedia

Status: Not done

List of users: Unypoly (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 싸랑 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 경기북도 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 마누라절 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Zeztto (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: none,

Reason(s): I blocked 3month by no reason. RedMosQ blocked me 6month after block of 싸랑, 1 year after block of 경기북도 and Zeztto. Reason of last two blocking of 58.29.48.106 is Abusing multiple account. contineous mischief (다중 계정의 악용: 지속적인 장난) I want to proof I am innocent. --58.29.48.106 22:54, 2 April 2012 (UTC)

The checkuser can never "absolve"...anyway your previous request was a nice try ;) --Vituzzu (talk) 23:14, 3 April 2012 (UTC)

I think several user is multiple account of other user. checkusing can find it. So it is steel necessary. --04:19, 4 April 2012 (UTC)

Checkusing can find Unypoly's or other missing sockpuppet--58.29.48.106 04:21, 4 April 2012 (UTC)

sorry, we dont agree this chack . and I dont know this chackuser requests because this user don't write atko:백:다검. please do notdone please--DangSunM (talk) 23:05, 6 April 2012 (UTC)

We didn't agree this request. 58.29.48.106 is Unypoly and he has misused IP, 58.29.48.106. although you have a result, You don't declare a result about this request. and you should block 58.29.48.106. and It is strongly advised that you check ko:백:다중 계정 검사 요청 and consensus of some request. At the conclusion, We don't have any consensus of this request. Stop checking. --RedMosQ (talk) 03:41, 7 April 2012 (UTC)

Not done No consensus from the local community to perform this check. -- Quentinv57 ^(talk) 15:30, 7 April 2012 (UTC)

Diablo3897@mediawikiwiki

Status: Done

List of users: Diablo3897 ([[; Special:Contributions/Diablo3897|contr]] · [[; Special:DeletedContributions/Diablo3897|deleted]] · block · log · block log · CA · guc · checkuser · lwcheckuser); Diablo56804 ([[; Special:Contributions/Diablo56804|contr]] · [[; Special:DeletedContributions/Diablo56804|deleted]] · block · log · block log · CA · guc · checkuser · lwcheckuser); Diablo699 ([[; Special:Contributions/Diablo699|contr]] · [[; Special:DeletedContributions/Diablo699|deleted]] · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): I have blocked the latter two as socks of the former, and we have no local CheckUsers. I have a feeling that these aren't the first accounts made by this person.Jasper Deng (talk) 03:42, 7 April 2012 (UTC)

- ...and my autoblocks seem to confirm it.--Jasper Deng (talk) 04:00, 7 April 2012 (UTC)

Those three accounts are

Confirmed.

It is

Likely to belong to this group :

Thuydungims11
Iwantpatient
Katewinlest88
Thiephong
Mattroi88
Xuanhoa

and to this one :

Agulal
Phamsofia811
Signsapr2
Facup0980
Majgoaye90
Vimegu990
Vimegu90
Pitivi90
London578
Florist26th
Lasermarking546
Pourboir
Lisimsta229
LeHanhNga
Kevilcuongpro
Thongkaka71
Thongkaka66
Thongkaka61
Katanara
Thongkaka58
Thongkaka50
Dienthoai9
Tuixachs90
Thongkaka44
Leeena77
Phonglan90
Thuyenbien89
Lili887
Thongkaka28
Thongkaka27
Thongkaka26
Liliseos6
Xuan12
Noithat12

All of them are more or less spammers, anyway. I blocked the ones that were not already blocked. Cordially, Quentinv57 ^(talk) 06:52, 7 April 2012 (UTC)

At Q's request I have done further digging. All

Confirmed and if you look at the block log you will see the problematic ranges have been blocked for the medium term. I only saw 1 possible account that would take collateral damage. I have notified CU to see if others are having similar issues. —The preceding unsigned comment was added by Billinghurst (talk • contribs) 09:24, 7 April 2012.

First of all, wow. Nice work uncovering this everyone. Billinghurst, you say one account could take collateral damage. I think it can just be given the IP block exemption flag? --Krenair ^{(talk • contribs)} 12:36, 7 April 2012 (UTC)

Zero edits anywhere,, and I couldn't be sure that it is a good account, so I wasn't overly fussed. If MW thinks that it should be, then I can dig it out and grant exclusion. billinghurst sDrewth 12:46, 7 April 2012 (UTC)

Thanks a lot! I have to say that since your blocks we have received at least 90% less spam!--Jasper Deng (talk) 02:33, 8 April 2012 (UTC)

ElectroStatic Jolt@pt.wikipedia

Status: Done

List of users: ElectroStatic Jolt (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Bytes (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Bytes (talk · contribs) Conta criada em 5 de abril e tentativa de pesca em bruno leonard (Account created on April 5 and attempted fishing em bruno leonard) 189.34.91.158 16:12, 7 April 2012 (UTC)

Well, I know ip's can not do requests. Then ask them to do in my name, because the pattern is very similar issues. Thank you.Érico ^msg 22:26, 7 April 2012 (UTC)

I'd say

Confirmed, based on the evidence and the checkuser results. No more sockpuppets found. Trijnstel_talk 17:12, 8 April 2012 (UTC)

Conde Nolasco@pt.wikipedia

Status: Done

List of users: Conde Nolasco (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Lorenzo de Habsburgo-Este (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Lord Nolasco (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Marcco di Aganetti (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); HenriValois (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Contour lock of Lorenzo de Habsburgo-Este. Behavior similar to edit pages: vandalism and creating false articles about noble families. Lord Mota (talk) 17:29, 7 April 2012 (UTC)

Small note: I blocked the Lord Nolasco for being DUCK obvious user. The editions of the users are really like.Érico ^msg 22:29, 8 April 2012 (UTC)

1 & 2

Likely or greater so, call it

It looks like a duck to me, remainder are

Stale. I would keep a watch on Waleran Bigot, and George Fitzalan as

Possible (both have zero edits). billinghurst sDrewth

Andrade Lira Brun@pt.wikipedia

Status: Not done

List of users: Andrade Lira Brun (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Dias Lira Leonard Bruno (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Carro Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Bruno Leonard (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Karyne Lira Dias (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:pt:Steven Adler, block talk

Reason(s): This users revert correct editions, and by identic name. "Dias Lira Leonard Bruno" as "Bruno Leonard Lira Dias". Carro Voador revert correct editions, same comportament. Bytes (talk) 14:57, 7 April 2012 (UTC)

Please check w:pt:User:Simone Lira. Simone Lira is a "false cousin" of Bruno Leonard. Karyne Lira Dias, Simone Lira and Dias Lira Leonard Bruno has a identic surname. Bytes (talk) 14:57, 7 April 2012 (UTC)

Usuário Bytes nada mais é que o bloqueado Electro Static Jolt 15:39, 7 April 2012 (UTC)

Eu solicito a imediata suspensão da verificação: eu não tenho nenhuma coneção com essas contas. Esse covarde (usa nome Byte pra fazer acusações infundadas) usa meu nome pra me prejudicar na Wikipédia e por culpa dele estou bloqueado na Wikipédia. E ponto final.
Translate to English: I request the immediate suspension of the check: I no have connection with these accounts. This coward (use the name Byte to make unfounded accusations) use my name to harm me in Wikipedia because of him and I am blocked on Wikipedia. That's it. Bruno Leonard (talk) 00:37, 10 April 2012 (UTC)

Not done at this stage. Hold over for appointment of CU atptWP. billinghurst sDrewth 13:16, 10 April 2012 (UTC)

ElectroStatic Jolt@pt.wikipedia

Status: Not done

List of users: Bytes (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Andrade Lira Brun (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Dias Lira Leonard Bruno (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Carro Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Karyne Lira Dias (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Lord Mota (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Usuario117 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Luizpuodzius (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Wikipédia:Pedidos a administradores/Pedidos de bloqueio

Reason(s): Uso e abuso de IPs e usernames para dirigir ofensas contra mim e a outros wikipedistas para pedir bloqueios. As diversas ofensas coincidem nas mesmas horas e dias desses IPs/usernames. Inclua verificações de IPs (todos de Curitiba, Paraná, Brasil):
Translate to English: Use and abuse of IPs and usernames to direct attacks upon me and other wikipedians to request locks. The various offenses coincide in the same hours and days of IPs/usernames. Include checks IPs (all of Curitiba, Paraná, Brazil):

187.37.245.112 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
189.32.39.226 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
189.34.91.158 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Bruno Leonard (talk) 01:26, 10 April 2012 (UTC)

Lord Mota is a well known editor at wikipt, as is Luizpuodzius. There are very few evidences to warrant a check as inclusive as this, based only on geo info. Be careful, please. José Luiz ^talk 02:31, 10 April 2012 (UTC)

Not done. Previous checks done in this area, and has level of tit for tat. Further efforts can await appointment of CU at ptWP. billinghurst sDrewth

Luke7956@zh.wikipedia

Status: Done

List of users: 中野和泉 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Luke7956 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): 中野和泉 seems to be the long term abuser Luke7956 as he disrupts the community in a pretty similar way. There is more information about Luke7956 on our wiki. Bencmq (talk) 13:06, 10 April 2012 (UTC)

Best I can tell

Inconclusive compared to historical data billinghurst sDrewth 14:01, 10 April 2012 (UTC)

HTFFanBrandon04@global/BrandonSkyPimenta@global

Status: Done

List of users: HTFFanBrandon04 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); BrandonSkyPimenta (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): See Meta:Stewards' noticeboard and en:WP:Sockpuppet investigations/BrandonSkyPimenta. Not a normal check, please run checks on all wikis, and globally block his underlying IP address(es).--Jasper Deng (talk) 04:56, 11 April 2012 (UTC)

I'm not a steward or checkuser, but this one might be related. Mathonius (talk) 05:24, 11 April 2012 (UTC)

I'm not either, but mw:Special:Contributions/201.8.22.209 might be related. πr² (t • c) 05:26, 11 April 2012 (UTC)

IP blocked on MediaWiki.org.--Jasper Deng (talk) 05:29, 11 April 2012 (UTC)

Unsurprisingly Confirmed User is using what looks like dynamically assigned IP addresses from the one ISP (9 IPs identified on mw alone) and these IP are at least over 3 /8 ranges. Looking to manage this by blocking IP ranges would be problematic and have broader consequences and collateral damage. billinghurst sDrewth 15:02, 11 April 2012 (UTC)

Κάρυστος50@el.wikipedia

Status: Done

List of users: Κάρυστος50 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 212.251.116.28 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Alexispao (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Ιστορία (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Tromaras (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Solio (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 46.12.136.233 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Distachkgi (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): There is an edit war running the last days in the article of el:Χρυσή Αυγή (extreme right political party of greece: the English article of that party is en:Golden Dawn (Greece)). In this article I suspect that the users Alexispao, Ιστορία, Tromaras, Solio and 46.12.136.233 are sock-puppets. The users has been notified about the policy about sock-puppets in the discussion page of that article [8]. There is also a notice about possible sock-puppetry on the administration board [9]. The new user Κάρυστος50 probably is a sock-puppet of Alexispao or Ιστορία or Tromaras or Solio or 46.12.136.233. This user did a lot edit-war within the article el:Ρέθυμνο, and has been blocked being rude. Now the 212.251.116.28 is probably the IP of Κάρυστος50.. which is used for abusing people and flame-war [10] while the registered account: Κάρυστος50 is blocked. Please investigate if sock-puppetry is taking place. Ggia (talk) 17:31, 11 April 2012 (UTC)

To the checkuser: Please note that user Κάρυστος50 and 212.251.116.28 have contributed only in the article of el:Ρέθυμνο and have not have not been involved in any other article than el:Ρέθυμνο. Both are currently blocked (one by myself), being obvious to the admins of el-wiki that are one and the same user. I do not see any valid reason to check these users against the other users mentioned here, who are contributing / possibly sockpuppeting / in another article (el:Χρυσή Αυγή). --FocalPoint (talk) 19:53, 11 April 2012 (UTC)

To the checkuser: It is true that Κάρυστος50 is a new user with only contributions to el:Ρέθυμνο but left this message to my talk page [11] commenting about the article of el:Χρυσή Αυγή. I suspect that is also a sock-pupper of the other group of users {Alexispao, Ιστορία, Tromaras, Solio and 46.12.136.233}. I suggest that this one should be checked also. Ggia (talk) 21:32, 11 April 2012 (UTC)

To the ckeckuser: User Distachkgi just appeared as a new user and seems as a sock-puppet of Κάρυστος50 (may-be sock-pupper of {Alexispao, Ιστορία, Tromaras, Solio and 46.12.136.233}. Ggia (talk) 21:41, 11 April 2012 (UTC)

Unrelated fr33kman 21:55, 11 April 2012 (UTC)

TelesClochard@pt.wikipedia

Status: Done

List of users: TelesClochard (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Arthur Chevailier (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Barrymore Holmes (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Viktor Lutkovna (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); MasterSock (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Block evasion / probable sock puppet of these users mentioned (see block request). Francisco (talk) 13:40, 12 April 2012 (UTC)

Confirmed and related to a previous checkUser request billinghurst sDrewth 14:05, 12 April 2012 (UTC)

plus today I have globally locked these socks

Lucas Teles banido (Talk | contribs | block) (Check) (12:39, 13 April 2012 -- 12:40, 13 April 2012) [3]
Vretarna Stovreten Karlstorp (Talk | contribs | block) (Check) (12:38, 13 April 2012 -- 12:38, 13 April 2012) [3]
Aporietkdj j lklsjjfjsjdllf (Talk | contribs | block) (Check) (12:35, 13 April 2012 -- 12:36, 13 April 2012) [3]
Dyones Ropper (Talk | contribs | block) (Check) (12:22, 13 April 2012 -- 12:28, 13 April 2012) [5]
Bernard Colliwing (Talk | contribs | block) (Check) (12:14, 13 April 2012 -- 12:19, 13 April 2012) [4]

though I see that there are edits that need attention. billinghurst sDrewth 12:47, 13 April 2012 (UTC)

Pizza is Pizza and Pizza@mediawikiwiki

Status: Done

List of users: Pizza is Pizza and Pizza (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); BACK State Street Apizza BACK (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); State Street Apizza, HES BACK AGAIN (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): We have no local CheckUsers. This is a cross-wiki spammer constantly spamming a particular YouTube link. I think it's time that we put a halt to this. Note that only the first one is mainly on mediawikiwiki and the others are on other wikis, but this is a cross-wiki case.--Jasper Deng (talk) 05:06, 15 April 2012 (UTC)

Done what we can, you may wish to block the url locally. Thanks. billinghurst sDrewth 05:32, 15 April 2012 (UTC)

Since the same link is being added globally, I've requested a global blacklist of it. Since I don't know and I can't do so, would there please be eyes on Talk:Spam blacklist?--Jasper Deng (talk) 05:34, 15 April 2012 (UTC)

Global blacklist can only be applied to a domain, the full url or other components needs to be handled locally. billinghurst sDrewth 05:36, 15 April 2012 (UTC)

Ugh. So what would the regex be for it if I were to add it locally?--Jasper Deng (talk) 05:40, 15 April 2012 (UTC)

I would just add the full url suitably modified, or you could just look to \WA4jgXQQns8A billinghurst sDrewth 05:43, 15 April 2012 (UTC)

Locally blacklisted on mediawikiwiki now, would be nice if we had a bot to add and sync such links.--Jasper Deng (talk) 05:47, 15 April 2012 (UTC)

chicocvenancio@pt.wikipedia

Status: Done

List of users: chicocvenancio (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: pt:Wikipédia:Pedidos de administração/Chicocvenancio

Reason(s): Weird accusations of me being a sock of a unnamed user are flying around in my RfA. I'd appreciate a check to put those suspicions to rest Chico (talk) 18:29, 15 April 2012 (UTC)

Counting out a shared IP with no suspicious activity, I could find no other account than ChicoBot checking Chicocvenancio's IPs.Elfix 18:38, 15 April 2012 (UTC)

Jancen sergio@pt.wikipedia

Status: Done

List of users: Jancen sergio (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Was blocked before due to sockpuppetry (see [12]). Another CU result appointed a possible connection to this case. Since then the account has been under observation, and raised suspicion after his involvment with this pool. Is it possible to verify again with the related cases and see if new accounts are uncovered? Thanks, viniciusmc (talk) 16:00, 17 April 2012 (UTC)

Question: Err, wait. Are you asking us to redo the check? Any new elements that would justify re-doing the CU? Elfix 21:08, 17 April 2012 (UTC)

I'm trying to see if it's possible to uncover other accounts. On this CU result Jancen sergio was connected to this case, which involved a huge number of socks and manipulated pools (see here and here). On the last few days he raised suspicion due to unusual edits on this pool and its related pages. --viniciusmc (talk) 21:59, 17 April 2012 (UTC)

Well, without any great eagerness I performed a check on this user, and found nothing suspect. The new data is still different from the one associated with Caroline Rossini: there is still no way to link them up. If you have any new accounts, it would help a lot, though. Elfix 22:20, 17 April 2012 (UTC)

Pacespace@pt.wikipedia

Status: Done

List of users: Pacespace (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Dorleans (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Demostenes57 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Objetivofluir (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:pt:Congregação Cristã na Suíça

Reason(s): Users have interest in the same article and similar behavior. Your edits try to force a particular viewpoint. Hallel^talk 16:07, 17 April 2012 (UTC)

Possible, but meat-puppetting seems more probable in this case. Elfix 22:27, 17 April 2012 (UTC)

Lazário Lagário@pt.wikipedia

Status: Done

List of users: Carro Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Cachoeira Branca (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Chegou a Dora! (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Cocheira Branca (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Corsa Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); DeLorean Voador (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Emissoras de TV (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jornal do Bóris (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Block evasion. Same edit pattern. Main account is "Carro Voador" (blocked for 1 month since April 6), and the others are already blocked. viniciusmc (talk) 16:15, 17 April 2012 (UTC)

All

Confirmed. Elfix 21:18, 17 April 2012 (UTC)

Trueland123@mediawikiwiki

Status: Done

List of users: Trueland123 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Trueland (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): These are obviously one and the same spammer. Would be nice if the IP(s) and other accounts could be rooted out. We have no local CheckUsers, nor a local CheckUser policy (except that our socking policy permits its use to examine socking cases like this one).--Jasper Deng (talk) 19:34, 17 April 2012 (UTC)

Confirmed, as expected. I locally blocked the underlying IP address for two weeks. It could be an open proxy. I'll ask others to check that. Trijnstel_talk 19:39, 17 April 2012 (UTC)

George miranda do nascimento@pt.wikipedia

Status: Not done

List of users: Jamison123 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); JacylaneLima (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Edi Vengeance *; (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Suspected sock puppets. I think miranda George miranda do nascimento, are creating these users so they can give multiple votes. The user Jamilson123, has given a vote for a "good article" on article by George on Wikipedia in Portuguese.

Luckas12 (talk) 21:20, 16 April 2012 (UTC)

Some polls that users participated: Wikipédia:Escolha do anexo em destaque/Anexo:Discografia de Backstreet Boys, Wikipédia:Escolha do anexo em destaque/Anexo:Lista de singles número um na Promusicae em 2011, Wikipédia:Escolha do anexo em destaque/Anexo:Discografia de Chris Brown, Wikipédia:Escolha do artigo em destaque/Born This Way, ikipédia:Escolha do artigo em destaque/Turn Up the Music (canção de Chris Brown), Wikipédia:Escolha do artigo em destaque/Turn Up the Music (canção de Chris Brown). But also in some polls he voted in a "different".Érico ^msg 22:30, 16 April 2012 (UTC)

Can we have it confirmed by an administrator that they are concerned about someone trying to pervert processes, and whether there has been attempts to resolve this onwiki. billinghurst sDrewth 09:23, 17 April 2012 (UTC)

Érico is a bureaucrat at pt.wiki. --viniciusmc (talk) 22:00, 17 April 2012 (UTC)

That response doesn't answer my request. Checkuser tool is not a magic wand, and such a request should be coming from someone who has the concerns and can do something about it rather than from a general user. At this point, there seem some superfluous requests. billinghurst sDrewth 12:36, 18 April 2012 (UTC)

I do not think the same people (my opinion). And if there are more doubts applications will finally be done locally, without the necessity of come here.Érico ^msg 21:07, 18 April 2012 (UTC)

Not done billinghurst sDrewth 09:57, 19 April 2012 (UTC)

Thanks, it was not malicious intent. Just a suspicion, I'm glad to know it was not fake accounts. Luckas12 (talk) 15:14, 19 April 2012 (UTC)

Xos Ylyunga@sah.wikipedia

Status: Done

List of users: Xos Ylyunga (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Selena Gomez fan (cross-wiki vandal) (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Edit warring in the Selena Gomez article; only speaks English; the activity around thios article and the article on Lady Gaga are the only contribution of this user.--Ymblanter (talk) 19:09, 17 April 2012 (UTC)

Confirmed - I already locked it earlier today. Apat ng GABRIELA (also locked) is a confirmed sock. Trijnstel_talk 21:29, 17 April 2012 (UTC)

Bedankt--Ymblanter (talk) 05:46, 18 April 2012 (UTC)

佛學@zh.wikipedia

Status: Done

List of users: 佛學 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 人人微博 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 北京淘寶 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 台北基金 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 購物 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 求職 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 電子書 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 影片 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: zh:User:Alberth2/temp2

Reason(s): We are seeing some pattern accounts being created everyday since this week, and some of them started to spam on their user page/talk page. You may find a longer (incomprehensive) list at zh:User:Alberth2/temp2. Also, if possible, please place a local block on the underlying IP(s). Thanks. Bencmq (talk) 08:43, 19 April 2012 (UTC)

more:

論壇 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
弘憶論壇 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
佛法 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
法師 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
佛經 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
拍賣 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
電視 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
大寬法師 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
大寬 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
軟體 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
東方黃金 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
愛心圖片 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
遊戲餐廳 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
電影達人 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
三國棒球 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
手機遊戲 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
手錶品牌 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
大樂透 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
電腦節 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
平板電腦 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
下載 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
公益 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
雜誌 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
牟尼佛法流通網 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

--Shizhao (talk) 14:11, 19 April 2012 (UTC)

Results

The following accounts are Confirmed. Unfortunately I can't block an IP address and/or range.

佛學
佛法
東方黃金
愛心圖片
愛愛圖片
人人微博
北京淘寶
遊戲餐廳
電影達人
台北基金
三國棒球
手機遊戲
手錶品牌
大樂透
拍賣
電視
購物
求職
電子書
影片
論壇
圖書
佛經
弘憶論壇
牟尼佛法流通網
法師
佛法
大寬法師
大寬
電腦節
平板電腦
下載
軟體
公益
雜誌
釋大寬法師

Trijnstel_talk 16:07, 21 April 2012 (UTC)

Observatore@pt.wikipedia

Status: Not done

List of users: Observatore (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Notice displayed

Reason(s): Gentlemen, My IP is blocked for three months. Had the same IP of a thug stubborn. I would like to know which user is suspected vandal sock me. Grateful. Observatore (talk) 21:17, 20 April 2012 (UTC)

A lock that reaches 16,000 users. This is prudent? Still blocked due to zealously. Observatore (talk) 21:39, 20 April 2012 (UTC)

Clarification, the range of IP was unlocked.Érico ^msg 21:42, 20 April 2012 (UTC)

As I said before, in my state's near monopoly in fixed telephony. It has been clarified. Grateful. Observatore (talk) 21:46, 20 April 2012 (UTC)

Note: A large IP range was blocked by a pt.wiki sysop, which ended by disallowing edits by Observatore. This range block was done with intentions to stop edits from a third user. As the range was too large, it was unblocked. Apparently, Observatore wanted to prove innocence with this request, but it doesn't seem to be necessary anymore per what he says.‴ T_ele^s (T _{@ L C S}) 02:01, 21 April 2012 (UTC)
- Not done then. Trijnstel_talk 13:53, 21 April 2012 (UTC)

D&S@pt.wikt

Status: Done

List of users: Riam (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Merriam (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Quoda (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); LoboBobo (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jorge Bruno Canadá (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jorge Messe (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Gualdim (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Vale Jorge Canadá (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Charroque da Boca Profunda (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Djuzé (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Suspected sock puppets of known pt.wikt vandal D&S. Please see my previous request related to this vandal for more information. And please, check them not only among themselves (to see if they are the same person) but also with other accounts used by this vandal in the past. Also take into account that he has been known to use open proxies in his vandalisms.

If you could check some of the new accounts created today in pt.wikt as well, I would be very grateful. There has been an unusual spur of activity, and some of the user names are slightly suspect, but I cannot say for sure.

Thanks.

--ValJor (talk) 20:06, 15 April 2012 (UTC)

Riam and Merriam are definitely

Confirmed, but I've asked other stewards to give some assistence in this case. You'll hear soon more. Trijnstel_talk 20:23, 15 April 2012 (UTC)

I added Quoda to the list, I'm almost sure it's him as well. Please check this one. Thanks again.

--ValJor (talk) 13:19, 16 April 2012 (UTC)

I would call it

Confirmed billinghurst sDrewth 13:32, 16 April 2012 (UTC)

Sorry to keep extending this, but I have now added LoboBobo to the list. Thanks!

--ValJor (talk) 12:55, 17 April 2012 (UTC)

Interestingly two IP addresses, one clear match for service provider and the behaviour, the other belongs to same location, though through TV cable. Enough of a duck to say

Confirmed. billinghurst sDrewth 14:51, 17 April 2012 (UTC)

Thanks for all the work so far, but I really need that overall check of new accounts. There has been way too much suspect activity this past few days, this guy is on a roll, I can't keep coming back here to list each case. Thanks.

--ValJor (talk) 08:51, 19 April 2012 (UTC)

CheckUser is not a prophylactic, nor is WMF able to filter new users. We simply have to judge users on their edits, and if there are problematic edits or editors then we will deal with them as they appear. Even (especially?) stewards are to comply with CheckUser#Use of the tool. billinghurst sDrewth 13:51, 19 April 2012 (UTC)

It looks like the good guys have their hands tied and the bad guys can do whatever they want. Sad state of affairs...

As I mentioned before, this guy is really insidious, his first "contributions" look very innocent for someone looking at them for the first time. He then establishes his puppets and after that starts the real vandalism. I have been trying to stop him before he can do real harm.

Anyway, in the past it has happened that you guys would find more sockpuppets than I had originally listed. I was asking for something like that.

Well, I listed a few more names that may be puppets of this vandal. Please check those. Thanks again for all the hard work!

--ValJor (talk) 14:40, 19 April 2012 (UTC)

Comment Request reopened. The last five accounts (Jorge Bruno Canadá, Jorge Messe, Gualdim, Vale Jorge Canadá and Mecanismo) aren't checked yet. Trijnstel_talk 16:06, 19 April 2012 (UTC)

We really can't check every new account. There must have a good reason to do it (i.e something on the username, something on the user edits that matches any pattern) or we run the risk of checking innocent users. For example, 'Mecanismo' is a regular user from pt.wiki and - though I can't assure that - it is very unlikely that he is related.‴ T_ele^s (T _{@ L C S}) 00:22, 21 April 2012 (UTC)

Oh well, while we here discuss the merits and problems of checking all new users, he has created another one: I replaced Mecanismo with Charroque da Boca Profunda. I really need your help guys!

It seems pt.wikt needs a dedicated CU person...

--ValJor (talk) 15:20, 21 April 2012 (UTC)

Confirmed:

Charroque da Boca Profunda
Jorge Messe
Djuzé
Jorge Bruno Canadá
Vale Jorge Canadá

I didn't check Gualdim as I could not identify any reason to do it. I'm ok if another steward wants to do it.‴ T_ele^s (T _{@ L C S}) 16:38, 21 April 2012 (UTC)

Now it seems he's trying to impersonate me, to create even more confusion. I just got the following message in my e-mail address:

Alguém, provavelmente você, com o endereço de IP 188.37.163.134, registou uma conta
"José Sócrates" com este endereço de e-mail no Wikcionário.

Para confirmar que esta conta realmente é sua, e para activar
as funcionalidades de e-mail do Wikcionário, abra o seguinte endereço no seu navegador:

http://pt.wiktionary.org/wiki/Special:ConfirmEmail/***

Caso este *não* seja você, não siga o endereço. Este código de confirmação
irá expirar 18h27min de 29 de abril de 2012.

Can you guys do something about this? Or is there another place to take this request, now that it is not related to checkuser?

--ValJor (talk) 12:46, 23 April 2012 (UTC)

In my message to you yesterday, I explained about the range blocks, and your ability to modify them. I would suggest that you discuss the email facility with your fellow administrators and determine whether that should be modified. At some point we simply have to let the irritations be seen as just that. This person is just an irritating prat, and will keep pushing the bruises. — billinghurst sDrewth 13:02, 23 April 2012 (UTC)

Ou96choc1r@mediawikiwiki

Status: Done

List of users: Ou96choc1r (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Ouchuquan1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Inquisitor Ehrenstein (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): No local CheckUsers, CheckUser can be used to investigate socking. The first two especially appear to be related or otherwise the same. All three asked the same kind of question, but I'm not so certain about the last one because only the first two have made things against the project's rules.--Jasper Deng (talk) 19:14, 23 April 2012 (UTC)

The following accounts are

Confirmed. I locally blocked the underlying IP address for two weeks.

Birdnicho
Ouchuquan
Ouchuquan1
Ou96choc1r
Ou96choc1r1
Ou96choc1r11

Inquisitor Ehrenstein is

Unrelated to the socks mentioned above.

Trijnstel_talk 20:36, 23 April 2012 (UTC)

Everyone blocked except Inquisitor Ehrenstein. Looks like they all wanted to impersonate him.--Jasper Deng (talk) 21:47, 23 April 2012 (UTC)

OK@sahwikipedia

Status: Done

List of users: OK (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); V. S. Nikolayev (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); I. N. Pryadeznikov (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Selena Gomez fan (cross-wiki vandal) (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): OK restored the template in the Selena Gomez article, which was first placed there by the previous reincarnation of SGF. V. S. Nikolayev and I. N. Pryadeznikov use the machine translation to solicite from other users some changes to Selena Gomez article. Thank you.--Ymblanter (talk) 18:53, 24 April 2012 (UTC)

Confirmed and globally locked! --Vituzzu (talk) 19:00, 24 April 2012 (UTC)

Thanks.--Ymblanter (talk) 19:03, 24 April 2012 (UTC)

Yuri_Venlaykov@cvwikipedia

Status: Done

List of users: Yuri Venlaykov (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Selena Gomez fan (cross-wiki vandal) (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Sorry for bothering you again, but now we got the same vandal in a different project.--Ymblanter (talk) 19:03, 24 April 2012 (UTC)

Confirmed and globally locked again. Thanks! Trijnstel_talk 20:36, 24 April 2012 (UTC)

Dank je wel.--Ymblanter (talk) 20:54, 24 April 2012 (UTC)

Americophile@fawikipedia

Status: Done

List of users: لئونیداس (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Pai mei (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 2.144.207.28 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Please also add 2.144.207.28. Following pages are examples of pages that are edited by these users: 1, 2, 3

Reason(s): Abusive sock puppetry. Abuse of sockpuppet accounts, using them to evade user accountability—and especially to make personal attacks. Creating an illusion of support (WP:ILLEGIT). Contributing to the same page or discussion with multiple accounts. Keeping one account "clean" while using another to engage in disruption. Voting several times in a RFA (e.g.). I should add that Americophile has previous records of sock puppetry. Once he was blocked for a long period for his abusive sock puppets. I should add that these users have similar edit pattern, sometimes using the same slang Behzad.Modares (talk) 01:45, 25 April 2012 (UTC)

Confirmed:

Americophile
ایران=افغانستان
Soghanlig
Hezbol
Hamed alikhani

Likely:

لئونیداس

Unrelated:

Pai mei

--Shizhao (talk) 02:59, 25 April 2012 (UTC)

Thanks. How about the IP (2.144.207.28)--Behzad.Modares (talk) 03:20, 25 April 2012 (UTC)

The IP are unrelated--Shizhao (talk) 06:32, 25 April 2012 (UTC)

Baydoo Algamayev@kywikipedia

Status: Done

List of users: Baydoo Algamayev (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Selena Gomez fan (cross-wiki vandal) (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Chechen (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hilim Goztar (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): cross-wiki vandalism. --N KOzi^Talk 11:35, 25 April 2012 (UTC)

only the first was

Confirmed and actions taken to block, and to help further for a little while. Thanks for reporting. — billinghurst sDrewth 12:00, 25 April 2012 (UTC)

Thanks. --N KOzi^Talk 12:04, 25 April 2012 (UTC)

Defgrth12@mediawikiwiki

Status: Done

List of users: Defgrth12 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Yuyyhr3 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Woshiz12 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Cczhuan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Their deleted contribs like remarkably similar in some ways. These are the kinds usernames a spammer would make. No local CheckUsers.--Jasper Deng (talk) 17:27, 27 April 2012 (UTC)

Confirmed and blocked for spam. -- Tegel _(Talk) 18:29, 27 April 2012 (UTC)

Be sure to block the underlying IP(s).--Jasper Deng (talk) 18:31, 27 April 2012 (UTC)

That's done as well. -- Tegel _(Talk) 18:31, 27 April 2012 (UTC)

5myartailor@mediawikiwiki

Status: Done

List of users: 5myartailor ([[; Special:Contributions/5myartailor|contr]] · [[; Special:DeletedContributions/5myartailor|deleted]] · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Like the above accounts, this account used HTML tags, and created a userpage quite similar to one of the above accounts' (all in deleted contribs). No local CheckUsers. Consider this request to include the above accounts.--Jasper Deng (talk) 01:24, 28 April 2012 (UTC)

Confirmed, open proxy blocked. Bencmq (talk) 02:37, 28 April 2012 (UTC)

8cWPEwC@en.wikiversity

Status: Done

List of users: 8cWPEwC@enwikiversity (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); RURuF79@oldwikisource (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Aobg6NM@commonswiki (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): crosswiki spam, not sure if I put this in the right place... en.vw doesn't have checkusers. PiRSquared17 (talk) 01:46, 28 April 2012 (UTC)

Yeah, the template doesn't take more than one wiki.--Jasper Deng (talk) 02:16, 28 April 2012 (UTC)
Confirmed, was a duck case anyway, but global blocks were in order. Snowolf ^{How can I help?} 02:23, 28 April 2012 (UTC)

Rerepepe@mediawikiwiki

Status: Done

List of users: Rerepepe ([[; Special:Contributions/Rerepepe|contr]] · [[; Special:DeletedContributions/Rerepepe|deleted]] · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): Based on deleted contribs' page names, yet another spammer like before (see my previous requests for this wiki above). No local CheckUsers.--Jasper Deng (talk) 03:07, 28 April 2012 (UTC)

It does not seem to be related with previous accounts checked. No other accounts found.‴ T_ele^s (T _{@ L C S}) 03:27, 28 April 2012 (UTC)

Strange considering that Dpuw6402, created just half an hour earlier, had his talk page also included in this spammer's spamming.--Jasper Deng (talk) 03:31, 28 April 2012 (UTC)

Yeah... I saw that. Checkuser tool didn't relate it to Dpuw6402 though and I have no reason to check Dpuw6402.‴ T_ele^s (T _{@ L C S}) 04:21, 28 April 2012 (UTC)

همان@fa.wikipedia

Status: Done

List of users: 2.144.207.28 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Pai mei (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); همان (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Please also add 2.144.207.28. Following pages are examples of pages that are edited by these users: 1, 2, 3. These users are using the same slangs and idioms that support these idea that they are probably one user. (of course these idioms and slang not very widely used by everyone and it is very unlikely that 3 unrelated users have such a similar language and vocabulary)

Reason(s): Abusive sock puppetry. All these accounts and IP voted and participated together in a sensitive election (e.g.). Abuse of sockpuppet accounts, using them to evade user accountability—and especially to make personal attacks. Creating an illusion of support (WP:ILLEGIT). Contributing to the same page or discussion with multiple accounts. Keeping one account "clean" while using another to engage in disruption. I should add that user:همان and two other suspecting accounts are currently blocked for violation of various Wiki policies, therefore, any other active account from these users are abusive sock puppets. Behzad.Modares (talk) 00:35, 30 April 2012 (UTC)

Pai mei and همان are

Unrelated. No comment with regard to the IP address. Trijnstel_talk 20:24, 30 April 2012 (UTC)

Please investigate the IP as well. The IP was very disrupting and it did serious personal attacks and voted with the users. If it is the sock of this user. It will be a huge issue.Behzad.Modares (talk) 20:34, 30 April 2012 (UTC)

As a response to your email you send to me: I can only say the IP address is definitely

Unrelated to user همان (who has sysop rights). Trijnstel_talk 20:37, 30 April 2012 (UTC)

Thank you so much for the fast response.Behzad.Modares (talk) 20:40, 30 April 2012 (UTC)

Ada Dzhabrailnev@lezwikipedia

Status: Done

List of users: Ada Dzhabrailnev (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Selena Gomez fan (cross-wiki vandal) (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Chechen (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hilim Goztar (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): cross-wiki vandalism. --N KOzi^Talk 08:30, 30 April 2012 (UTC)

Confirmed and I found a second account: Zhakail539. Both are globally locked now. Thanks! Trijnstel_talk 19:49, 30 April 2012 (UTC)