Jump to content
Wikimedia Meta-Wiki

Steward requests/Checkuser/2016-04

From Meta, a Wikimedia project coordination wiki
Latest comment: 8 years ago by Haptokar in topic Requests
Warning! Please do not post any new comments on this page. This is a discussion archive first created in April 2016, although the comments contained were likely posted before and after this date. See current discussion.

Requests

Latest comment: 8 years ago 54 comments19 people in discussion

শাহাদাত সায়েম@bn.wikibooks

Status: Not done
List of users
শাহাদাত সায়েম (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): I am an admin of bangla wikibooks. There have no checkuser. Long Term Abuse cross-wiki troll problem. -- শাহাদাত সায়েম (talk) 03:02, 1 April 2016 (UTC)
Read CU for detailed information on how to be elected as a local CheckUser. Ajraddatz (talk) 03:03, 1 April 2016 (UTC)

BLÆGG@no.wikipedia

Status: Done
List of users
BLÆGG (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
BLÆKK (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
KLÆPPLØK (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
KLAPPLØK (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
KLIPPLØK (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Waiting on the fire (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
David Ulvingsen (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reisefeber (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Solidaritetsmenneske (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Seems to be one or two sets of vandalism accounts (probably with a history covering several years). Most of them can easiliy be identified, but some edits are constructive and distrurbes the picture. A better understanding of the relation between the accounts would be beneficial to handle the vandalism and maybe turn the user into a constructive contributor. 4ing (talk) 11:10, 6 April 2016 (UTC)
There are indeed two Confirmed groups of accounts:
  • The first group: BLÆGG, KLIPPLØK, KLOPPLØK, Lovelyspeed, Hovde, Lovelywart, Lovelydinner, Lovelysausage, Lovelysteak, Mynas-19, Lovelyfishes, SuperOddleif, Lovelymeal, SugKukk, Lovelysupper, Redigeringskrigeren, Lovelyarts, KLÆPPLØK, BLÆKK, Sjikanekonto.
  • The second group includes: Good friend down the street, Tingelingelingeling, Quickfire Runde, David Ulvingsen, Waiting on the fire, Reisefeber, Solidaritetsmenneske, Bedriftskatalog, To figure, Håndfull, Det ville seg slik da..., Morgendagens søsken, Toppen av treet, Wasn't expecting that, Marianne Johansen Vikestrand Johnsen, Øverstehylletakk, Grønn drue uten stein, Mandag 7. mars 2016, It's a little bit funny, this feeling inside, Jobb i morgen, Vinterens problemer, Endre Johansen Kleppeby, Ullent, Like toy soldiers, You'll be falling in love oh oh, Laughing in my life, World and värld, Den ble vist på TV i 1997, Greier og ting og saker, Jeg hater snø!, Andy Johnson Charlie, Kjernekar, Smakløst brød med jarlsbergost, From my life, Manglende CAPTCHA-svar, Sammenblanding av ord, Brokker i hvitløk, Fredagskveld, Stor dag, Godt nytt år!.
I am not sure that these lists are exhaustive. Ruslik (talk) 13:56, 6 April 2016 (UTC)
@Ruslik0: Thanks a lot for your swift response. The first group should definitely be connected to a previous case (Mynas), based on edit pattern and username similarity. However, I would be surprised if Hovde (an account recently unblocked after being blocked for 8-9 years) is connected to this vandal. How "confirmed" is this connection, based on the CU data? - 4ing (talk) 19:22, 6 April 2016 (UTC)
It is a very firm identification: exactly the same IP and UA string. Ruslik (talk) 19:35, 6 April 2016 (UTC)
@Ruslik0: I'm not a technical expert, but I guess this implies that the accounts are editing from the same network and with the same OS/browser - not necessarily the same computer? - 4ing (talk) 20:28, 6 April 2016 (UTC)
It means that they are indistinguishable as far as checkuser is concerned. Ruslik (talk) 20:11, 7 April 2016 (UTC)
Tagging as done so it can be archived. Ajraddatz (talk) 07:13, 11 April 2016 (UTC)

শাহাদাত সায়েম@bn.wikibooks

Status: Done
List of users
শাহাদাত সায়েম (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Kawsar natore (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Arifuzzaman Masud (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): I have doubt this user is using shockpupets account. please please check his admin right request disscussion and his importer right request. in two requests everywhere Kawsar natore supporting শাহাদাত সায়েম. and please check it also that Kawsar natore has no good edit only supporting শাহাদাত সায়েম in global projects. there is no local project page where I can disscused about it. so I applying here .... Seth talk 09:04, 7 April 2016 (UTC)
I'll work on this request. —Marco Aurelio 14:45, 8 April 2016 (UTC)

Result is Inconclusive Inconclusive from my point of view. Technical data is unclear on the relationship between this two accounts as far as my knowledges permit me to interpret. The users also operate from a series of IP pools which appears to be popular in the zone, and they ain't the only users using them, so it makes this a bit difficult. If another steward wants to review my findings should feel free to do so. —Marco Aurelio 15:43, 8 April 2016 (UTC)

@MarcoAurelio: please check User:Arifuzzaman Masud..I have doubt he is one of the account control by শাহাদাত সায়েম

....this new account has no edit only supporting শাহাদাত সায়েম in disscussion about importer rights request by শাহাদাত সায়েম.....I want please review it again. Seth talk 14:34, 10 April 2016 (UTC)

@MarcoAurelio: please also check this rights request page history...this two accounts editing difference is only 7 minutes...I think this account create for only support শাহাদাত সায়েম in arguments. Seth talk 14:40, 10 April 2016 (UTC)
I'd appreciate if another steward could do it this time, so my first results are reviewed too. @Avraham: would you like to? —Marco Aurelio 14:44, 10 April 2016 (UTC)
I'll give it a shot. -- Avi (talk) 05:53, 11 April 2016 (UTC)
I'd say that Kawsar natore (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ) is Unlikely Unlikely to be related, while they are all on a large pool, Kawasar's technical data is different during editing times that overlap the other two. Arifuzzaman Masud (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ) only edited on one day, but the timing and technical evidence are such that it is Possible Possible that Arifuzzaman is also শাহাদাত সায়েম (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ), but, as MA says, it isn't conclusive. In this case reliance on behavioral evidence will be necessary. -- Avi (talk) 06:19, 11 April 2016 (UTC)
@Avraham: after oposed and comment on শাহাদাত সায়েম (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ) request...He repiled me 10:26 (UTC) ....after 6 minutes 10:32 new account created Arifuzzaman Masud (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ) and after 3 minutes he supporting শাহাদাত সায়েম (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )..Why new users supporr him???? they has no many edits or experience..... Kawsar natore (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ) is an inactive user....He active শাহাদাত সায়েম (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser ) need supports in any arguments. After @NahidSultan: bro opposed and my oppesed this account support him.....,,,In Support Comment this account tell that Support for Shadat bro.....This User new,,,how can he support???How can he know him??? Please check it. Seth talk 09:36, 11 April 2016 (UTC)
What we can do, as stewards, is provide our interpretation of the technical evidence that may or may not link accounts. While that is helpful, it is often preferable to make the decisions based on behavioral evidence. My interpretation, as provided above, is that it is possible, that Arifuzzaman Masud and শাহাদাত সায়েম are related, but it is also possible that they merely share the same IP pool and the timing of their edits is a coincidence. Native Bengali speakers and users of the project would have a better understandning as to the relationship between the two based on both timing and content of the edits. Kawasar, on the other hand, we can say is most probably NOT a sockpuppet. A meatpuppet, who knows? People cam, and will, continue to use off-wiki channels to communicate, and we have no on-wiki way to prevent that. All we can say about Kawasar is that it is unlikely that the same devices and editors ran that account together with the other two. Your better bet now is to get BnWikiB to start deeper investigations into Arifuzzaman Masud and শাহাদাত সায়েম . -- Avi (talk) 15:03, 11 April 2016 (UTC)
In other words, Pixiedust CheckUser is not magic pixie dust. —Marco Aurelio 15:23, 11 April 2016 (UTC)

Calal99@az.wikipedia

Status: Done
List of users
Calal99 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Fariz Rasullu (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): A while ago Calal99 was warned two times for download files about sportsmen who participated in 2015 European Games without license and source on AzWiki: [1], [2] After this account named Fariz Rasullu was created on 9 February. If you will see contributions of both users you can see similarity: both users work on articles about sportsmen only. And user Fariz Rasullu downloads files about sportsmen instead of Calal99 since february 2015 (with the exception of 1-2 files). It's suspicious. Sysop Araz Yaquboglu asked about the situation, but Calal99 denies and says that he doesn't know about the user. White DemΩn (talk) 11:02, 18 April 2016 (UTC)
Confirmed Ruslik (talk) 17:58, 18 April 2016 (UTC)

Asilah1981@en.wikipedia

Status: Not done
List of users
Asilah1981 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
88.23.190.114 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
76.17.85.194 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Generic pattern of name-calling, personal attacks and verbal abuse in sensitive articles, disruptive edits, plus further angry, reactive edits by means of IPs. Check talk page to track discussions and possible link to previous accounts. Most likely one here, plus possible recent one here. Extensive evidence of irregular behaviour in discussion of his/her talk page. Need to know if it matches the IP range for the same time period. Thanks Iñaki LL (talk) 13:58, 18 April 2016 (UTC)
Hola @Iñaki LL: lo siento pero desde aquí no te podemos ayudar. Desde Meta solo nos ocupamos de las verificaciones en proyectos sin verificadores locales. Para solicitar una verificación de usuarios en la Wikipedia en inglés puedes acudir a Wikipedia:Sockpuppet investigations . Un saludo, —Marco Aurelio 14:41, 18 April 2016 (UTC)

79.56.165.31@zh-yue.wikipedia and Wikimedia Incubator

zh-yue.wikipedia

Status: Not done
List of users
Charliewolf79 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
79.56.165.31 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )

Reason(s): User:WKDx417 has accused 79.56.165.31 of being used by User:Charliewolf79 to commit vandalism on Cantonese Wikipedia. I need to triple-check whether these are indeed one person. 【粵語 文學大使 殘陽孤侠粵維辭典起錨! 06:11, 21 April 2016 (UTC)

Support. Returnnew and Mozartbitte, Lupenquarto have judged for the sock puppets for User:Charliewolf79 in English Wikipedia and suspended for every wikis. Now I have seen 79.56.165.31's speech style so likely for Returnnew or Mozartbitte. So I think 79.56.165.31 was the sock puppets for User:Charliewolf79.--WKDx417 (talk) 07:29, 21 April 2016 (UTC)
We really can't connect accounts to IPs like that. Marking as not done, but if there is a connection then I'll deal with it quietly. Ajraddatz (talk) 18:43, 21 April 2016 (UTC)

Wikimedia Incubator

Status: Not done
List of users
Charliewolf79 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
79.56.165.31 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )

Reason(s): User:WKDx417 has accused 79.56.165.31 of being used by User:Charliewolf79 to repeatedly create duplicate contents on Wikimedia Incubator. I need to triple-check whether these are indeed one person. 【粵語 文學大使 殘陽孤侠粵維辭典起錨! 06:11, 21 April 2016 (UTC)

Support. Returnnew and Mozartbitte, Lupenquarto have judged for the sock puppets for User:Charliewolf79 in English Wikipedia and suspended for every wikis. Now I have seen 79.56.165.31's speech style so likely for Returnnew or Mozartbitte. So I think 79.56.165.31 was the sock puppets for User:Charliewolf79.--WKDx417 (talk) 07:29, 21 April 2016 (UTC)
Note Note: This is not a vote. CU requests will be judged by the merits of its reasons, not by counting votes. Also, I'm unease performing this check, as it'll have the side effect of revealing a user IP. —Marco Aurelio 18:40, 21 April 2016 (UTC)

Fersteckdis@ro.wikipedia

Status: Done
List of users
BAICAN XXX (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Artifactelu (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Bumbombum (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Djuvastat (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Morcoff (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
BAICAN BBB (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Seems to be one of the products of a clone farm of globally-banned user BAICAN XXX. BAICAN XXX is the original blocked account; BAICAN BBB has admitted to be the same as BAICAN XXX; Artifactelu, Bumbombum, Djuvastat and Morcoff have been established by the ro.wp community, based on behavior patterns, to be the same user. Andrei Stroe (talk) 08:19, 13 April 2016 (UTC)
Extended content
Results

Technical evidence suggests that the following users are related:

Some are blocked, but I did not checked for how long. These accounts have all edits, so before blocking a behavioural evidence check would be good.

Marco Aurelio 14:51, 14 April 2016 (UTC)

Two more have popped up:
Could you also check these two? Andrei Stroe (talk) 07:27, 18 April 2016 (UTC)
Andrei Stroe: Confirmed, add Kontullo (talkcontribsblockxwiki-contribs xwiki-date (alt )gblock ST lwcheckuser ) as well. —Marco Aurelio 07:58, 18 April 2016 (UTC)
Please add the account Source Unu (talkcontribsblockxwiki-contribs xwiki-date (alt )gblock ST lwcheckuser ) and keep open the present request, since the clone farm seems to be still active. --Pafsanias (talk) 09:16, 19 April 2016 (UTC)
Is it appropriate to ask the temporary blocking of his IP range on ro.wp by a steward? We used to do this in the past when he started farming sockpuppets, as he was the only person who used IPs from that range on ro.wp. I don't know if it is so now. —Andrei Stroe (talk) 09:34, 19 April 2016 (UTC)
And Saqwerte (talkcontribsblockxwiki-contribs xwiki-date (alt )gblock ST lwcheckuser ).Andrei Stroe (talk) 10:22, 21 April 2016 (UTC)
Andrei Stroe and Pafsanias: Sir55555ris, Qwerthui, Trevalier, Source Unu, 16uitelnui16, Reilavert, Saqwerte, Sare13.86 are the new accounts I can find. Also, if not detected before...
Some are blocked, but I did not checked for how long. About rangeblock, I'm not good at that, so maybe another steward can help here.
Regards, —Marco Aurelio 18:34, 21 April 2016 (UTC)
Three new popups
to be checked against the old background. -- Victor Blacus (talk) 15:38, 22 April 2016 (UTC)
Confirmed, plus:
Marco Aurelio 17:00, 24 April 2016 (UTC)
Please check another two: JdevanTheReader (talkcontribsblockxwiki-contribs xwiki-date (alt )gblock ST lwcheckuser ) and RGCPrince (talkcontribsblockxwiki-contribs xwiki-date (alt )gblock ST lwcheckuser ). --Haptokar (talk) 03:28, 1 May 2016 (UTC)

Abdulbasith27@ta.wikipedia

Status: Done
List of users
Abdulbasith27 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Abulbasher050 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Both user seems same due to similar user name and support each other in discussion. I have informed about user policy, but failed to response. Could you check that is there any Sock puppetry related to these user(s). Antan O 23:00, 21 April 2016 (UTC)

Technical evidence suggests that the above mentioned users are unrelated. RadiX 02:17, 22 April 2016 (UTC)

Zawagner@lmo.wikipedia

Status: Not done
List of users
Zawagner (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Sciking (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Scrive come me e vorrei mostrare che non è un mio sockpuppet Sciking (talk) 11:17, 19 April 2016 (UTC)
Use of the CU tool to prove "innocence" is highly discouraged and hardly even performed. —Marco Aurelio 18:36, 21 April 2016 (UTC)
@MarcoAurelio: no problem, we hare resolved :) Thanks --Sciking (talk) 13:10, 22 April 2016 (UTC)
Okay. —Marco Aurelio 10:03, 26 April 2016 (UTC)

سیرانوش@fa.wikipedia

Status: Done
List of users
سیرانوش (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Diako1971 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): There have been several discussions in Persian Wikipedia that whether this user is a sock or meat of Diako1971 who has an ongoing RfA. As a local 'crat I would like to know that :) Thank you Amir (talk) 11:29, 25 April 2016 (UTC)
Results are Inconclusive Inconclusive and show no overlapping IP. Besides, technical information obtained is not exactly consistent with standard updating of software over time. Anyway, behavioral evidence is key in determining either sock or meat puppetry. RadiX 13:03, 25 April 2016 (UTC)

Camilla298@no.wikipedia

Status: Done
List of users
Camilla398 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Camilla498 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Camilla598 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Similar behaviour and similar user names. Edit pattern is also similar to recently identified sockpuppet accounts (see BLÆGG@no.wikipedia). - 4ing (talk) 13:43, 28 April 2016 (UTC)
All Confirmed, same person as that last request. no:Spesial:Bidrag/CamillaPå is the only unblocked account of this pattern that I can see in the results. All accounts are using a mess of IPs, especially mobile ranges which are shared with many active and obviously good-faith users. I could provide a list of all accounts with my own judgements of likely or unlikely for you to sort through, if you'd like to see which ones match the pattern. Ajraddatz (talk) 14:34, 28 April 2016 (UTC)
Thanks for your quick response. I think we'll leave it with that for now, the main outcome of the CU is the connection to the previous case (which again is connected to the Mynas case). - 4ing (talk) 07:02, 29 April 2016 (UTC)

AltStyle によって変換されたページ (->オリジナル) /