Jump to content
Wikimedia Meta-Wiki

Steward requests/Checkuser/2017-12

From Meta, a Wikimedia project coordination wiki
Latest comment: 8 years ago by Ruslik0 in topic Requests
Warning! Please do not post any new comments on this page. This is a discussion archive first created in December 2017, although the comments contained were likely posted before and after this date. See current discussion.

Requests

Latest comment: 8 years ago 39 comments19 people in discussion

Илия от Шумен@bg.wikipedia

Status: Done
List of users
Илия от Шумен (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
АнтиМакедон (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
TormonOkalinovModernator (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Теменуга Пеева (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Иванчо 23 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Стевка Дойчева (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Стоянка Мустачева (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Дара Славова (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Настинал човек (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
2xy+6 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )

Reason(s): These accounts (only a handful presented here from the hundreds) have been consistently threatening our editors. The general template is "You [offensive name], once you get out of prison, you'll meet my [buddy, etc.] and you are not going to like it. Are you prepared for this?" Especially aggravating seems the fact that recently the person has specifically targeted our female colleagues—I guess it shouldn't be necessary to explain why this is so worrying. This harassment is going on for many months now, despite the hundreds of thousands of blocked open proxies and even the almost a hundred completely banned ISPs. We suspect that at least some of the accounts are created and operated from own (home/work) IPs of the person behind them. Considering the gravity of the case, we'd be grateful if the network ranges from which these threats are made are revealed, so that we may block them (specific addresses are not necessary).

Many thanks in advance!
LuchesarT/C 12:29, 18 October 2017 (UTC)
Pinging some colleagues who might want to follow this.
LuchesarT/C 13:02, 18 October 2017 (UTC)
I added 2 more accounts with similar edits, although there is not much point to list them since there are hundreds of them being blocked everyday. The harassment from these accounts, who originally spawned from the users bg:User:Модернатор and bg:User:Администратор has grown in the last few months and hasn't stopped from almost a year now, despite all the measures the administrators have taken against it, so far little has helped.--The Wiki Boy (talk) 18:53, 5 November 2017 (UTC)
I understand that revealing even vague personal info—and even in cases of harassment—might be an uncomfortable matter for you (and I appreciate this). Could you please check instead for any sleeper socks missed by our AI bot before those accounts slip out of the CU log? Actually, you could also use the fresh accounts here (basically anyone blocked for infinity). There is a reason I'm asking for sleepers check: the recent CU on enwiki revealed some socks, who on bgwiki had played the Good Samaritan, but which I've still suspected to be sleepers for a long time—most likely waiting to gain trust so that they could then avoid the AI bot, abuse filters, and possibly even patrollers' attention. I sincerely hope that this request isn't going to get unanswered.
LuchesarT/C 12:23, 30 November 2017 (UTC)
In particular, please do at least check the following account on bgwiki, even if you find the case as a whole so overwhelming that you couldn't be bothered with it. On our public mailing list an e-mail was received from someone claiming to be behind that account, who insisted that they had been globally locked by a steward for cross-wiki abuse without good reason. They don't seem very honest, but it is also a fact that so far they've been making only good edits (though mostly trivial, so it may have been a trick to gain trust):
Thanks,
LuchesarT/C 12:56, 30 November 2017 (UTC)
Done, from a technical point of view it seems there are two different masterpuppets, I took the necessary action you may want to "localize". --Vituzzu (talk) 16:12, 8 December 2017 (UTC)

张云飞@zh-classical.wikipedia

Status: Done
List of users
张云飞 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
爱新觉罗正鹏 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Reason(s): I am an administrator of the zh-classical Wikipedia.The day after 张云飞 was banned in zh-classical wikipedia, the account of "爱新觉罗正鹏" was created. And two of the editing features are particularly similar.WAN233 (talk) 11:37, 2 December 2017 (UTC)
Confirmed Ruslik (talk) 20:11, 2 December 2017 (UTC)

ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ@el.wikipedia

Status: Done
List of users
ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Vrahomarinaner (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Reason(s): Vrahomarinaner has a long term block on his account (6 months, recently extended), and his request to lift the block was recently denied based on the fact that he has been very active as an IP (most often 188.4.*.*) during the entire period of his block. His last activity as an account was on the 23rd of November 2017 (in his discussion page coinciding with the denial for removing the block); on the 24th the account ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ has been created, exhibiting a lot of similarities with Vrahomarinaner as well as similar disruptive behavior in just 15 days of being active, and it has also been established that ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ is operating from the same IP range Vrahomarinaner has been using as an IP (188.4.*.* and as per the discussion link where he admitted that he was behind the removal of admin notice in ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ discussion page, and then logged in reinstating the change only to remove it later again as ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ. Gts-tg (talk) 14:54, 8 December 2017 (UTC)
Confirmed--Vituzzu (talk) 15:55, 8 December 2017 (UTC)

哲涵@zh-classical.wikipedia

Status: Done
List of users
哲涵 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
林浚輝 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
CarbonicAcid (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Reason(s): CarbonicAcid and 林浚輝 only voted for him . Forge public opinion in RFA.

WAN233 (talk) 14:31, 7 December 2017 (UTC)

哲涵 and CarbonicAcid are Confirmed. Account 林浚輝 does not exist. Ruslik (talk) 19:41, 7 December 2017 (UTC)
@WAN233: Did you mean 林浚辉 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )? --WhitePhosphorus (talk) 09:35, 10 December 2017 (UTC)
It should be Special:CentralAuth/林浚辉--J.W ong 10:19, 11 December 2017 (UTC)
林浚辉 is also Confirmed. Ruslik (talk) 18:34, 11 December 2017 (UTC)

Barçamaniya@az.wikipedia

Status: Done
List of users
Barçamaniya (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Barselona99 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Reason(s): A while ago user Barselona99 was blocked for serious reasons (talking rough with the users, downloading files without license and source, using non-Azerbaijani characters in articles etc.), even we had discussed about this. After this new user appeared, Barçamaniya. The nicknames and writing styles are very similar. We have doubt that they are same users.White DemΩn (el psy congroo) 10:04, 10 December 2017 (UTC)
Likely Likely the same user. There are other accounts Likely Likely belonging to them like Azərbaycanın şəhidləri. Ruslik (talk) 18:29, 11 December 2017 (UTC)

Hatake@sq.wikipedia

Status: Done
List of users
Hatake (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Fukingusername (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
Reason(s): Hatake was blocked on sq.wikipedia on 11 December 2017 for repeated personal attacks towards Udha and three days later an account with the username Fukingusername was created. Udha and Hatake had some disagreements on article Kasem Trebeshina [1] and now Fukingusername and Udha are arguing about Kasem Trebeshina and some other topics [2] and Fukingusername asked an admin to block Udha.[3] Also Fukingusername started editing some articles Hatake used to edit. See [4] [5] [6] [7]. Olsi (talk) 22:19, 17 December 2017 (UTC)
Confirmed Ruslik (talk) 20:17, 18 December 2017 (UTC)

Sci-fi@en.wikiversity

Status: Not done
List of users
I live in singapore (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
117.20.41.10 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
117.20.41.9 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
178.209.40.102 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
64.120.56.10 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
23.105.134.162 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
193.70.12.231 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
82.132.217.30 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
82.132.220.14 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
82.21.88.44 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )

Reason(s): cross-wiki LTA disruption, and see also

  • Mark Bowman (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser ) locked as cross-wiki vandal, might not be stale. Last edits (one rev-del'd) create relatively weak suspicion. --Abd (talk) 18:17, 19 December 2017 (UTC)
  • 82.132.226.145 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser ) repeating common LTA arguments.
  • 74.175.117.25 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser ) claims to be a wikipedia user in good standing, but voting anonymously in request for deletion.
  • 82.132.238.67 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
  • All (or almost all) of these are pursuing a declared agenda of retaliation for documenting the LTA's massive and highly abusive socking. (This also includes off-wiki harassment, but nothing can be done about that here, except that some of these accounts link to it. More details on request.) --Abd (talk) 20:28, 22 December 2017 (UTC)
  • 82.132.223.81 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser ) per suggestion by Wikiversity administrator. --Abd (talk) 23:20, 22 December 2017 (UTC)
  • Not done, no need for checkuser to be used here. We cannot comment on the IP --> account connections, and all accounts have been appropriately dealt with where they are active. – Ajraddatz (talk) 23:42, 22 December 2017 (UTC)
  • * Thank you for your response! I noticed in w:Category:Wikipedia sockpuppets of Mikemikev that IPs as well as user names were mentioned as confirmed sock puppets. Can you or checkuser confirm if any of the IPs above are sockpuppets of any of the other IPs? --Marshallsumter (talk) 01:02, 23 December 2017 (UTC)
    While I could check for their user agents, I don't believe a checkuser is necessary in this case. Blocking of the IPs can be done based on behavioural evidence. The checkuser extension won't provide you with much information here, unfortunately. – Ajraddatz (talk) 02:36, 23 December 2017 (UTC)
    FYI: User:Abd has been warned that "excessive, frivolous, and nuisance abuse of checkuser requests" cross-wiki will result in a local block on en-wv.[8] Please inform us if any such activity occurs so that we may implement local sanctions. This request was not submitted with local consensus on behalf of our community. --mikeu talk 12:01, 23 December 2017 (UTC)
    I have submitted an extensive series of checkuser requests, all but this one resulted in global locks. This is the only one that was rejected, and while I disagree with Ajraddatz that no useful information is possible, see this proposal for a tool that would automate what is possible, I had accepted the decision. Being accused of filing frivolous requests, with the history that exists here, is appalling. The many requests and results were documented in User:Abd/LTA/Anglo Pyramidologist which has been deleted, out of process, but any steward or local admin can read it. There had been no complaint on meta about frivolous requests, and local consensus is not required to ask for checkuser, particularly where cross-wiki disruption is involved. (Local consensus is also not required to ask for checkuser on wikis where they have checkusers.) If it is, I'd appreciate being informed of it. Thanks. --Abd (talk) 18:32, 23 December 2017 (UTC)

    Δαφνοστεφανωμένος@el.wikipedia

    Status: Done
    List of users
    Δαφνοστεφανωμένος (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    Vrahomarinaner (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    DiogenesLaertios (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    Reason(s): A previous check this month (Steward requests/Checkuser/2017-12#ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ@el.wikipedia ) has already confirmed that ΕΝΑΣ ΝΤΕΛΙΚΑΝΗΣ and Vrahomarinaner are the same user's accounts. Now the user who is permanently blocked is back using the username Δαφνοστεφανωμένος.--MARKELLOS Leave me a message 17:22, 20 December 2017 (UTC)

    Comment Comment Would it be possible to add, also, user DiogenesLaertios ? I'm asking this addition, because it happens to be a user with a quite similar writting pattern with blocked user Vrahomarinaner, same interests and same editing wars with the same user (user Τζερονυμο). Maybe, we could wait a little in order to wait for further evidence but, except the creation of this article, everything else in his contributions and confrontations and editing wars with other users is typically in the Vrahomarinaner type of contributions. Also, we are speaking, here, about a user who was rather innactive until today, where he's making one contribution after another and only when other user Vrahomarinaner sockpuppets are absent or blocked. Thanks in advance. -- Montjoie-Saint-Denis !!! συζήτηση 18:03, 20 December 2017 (UTC)

    Confirmed for anyone except DiogenesLaertios, Unrelated Unrelated for DiogenesLaertios. Finally, Vagiopoulos may be related, but I suggest not to block if there are no behavior evidences. --Vituzzu (talk) 22:04, 22 December 2017 (UTC)

    Dr.P.Saravanan@ta.wikipedia

    Status: Done
    List of users
    Dr.P.Saravanan M.D., (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    Dr.P.Saravanan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    • CU log
    • Discussion: local policy is similar to en.wiki
    Reason(s): Similar user names and edits promotional info on other user's page. One is already blocked and need confirmation. Antan O 14:11, 28 December 2017 (UTC)
    The second account is stale but "Dr.P.Saravanan M.D.," has another sock - Drpsaravanan1. Ruslik (talk) 19:41, 28 December 2017 (UTC)
    Thank you!--Antan O 01:53, 29 December 2017 (UTC)

    162.217.133.122/24@en.wikipedia

    Status: Not done
    List of users
    170.78.75.25 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )
    45.251.108.20 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser )

    Reason(s): Check the editing history, editing purposes and editing time is very close. In addition, you can find unusual editors and offensive phrases.Offensive phrases Like1 2 3 4 5 6

    These accounts seem to target specific accounts,and create another account to try tracking.
    According to the past speech from an account.It can be assumed that this account may try to cancel some of the editors, perhaps using multiple accounts or multiple IPs, and even the possibility of using PROXY.After all, to use a continuous number of IP at same time is really amazing things.(IP:162.217.133.121 & IP:162.217.133.122 & IP:162.217.133.123).
    Check the history of w:en:10th Dalai Lama, you can notice some details.One is that IPs say 'sock of XXX' at the same time and the other one is an account that makes the same wording changes on all Dalai Lama pages at 1 October 2017.By the way, if you look up the w:en:14th Dalai Lama, you will find other details.
    Because checking users can make users find that they have been checked for fear of causing other negative effects such as adding more accounts, using more IP, and increasing the frequency or severity of tracking and harassment.Use '[ ]' to render the users that need to be checked.
    익명을주고 싶다 (talk) 00:43, 31 December 2017 (UTC)
    I'm not a steward, but unless I'm reading this wrong or not understand it correctly, this is a matter of the English Wikipedia. The English Wikipedia has its own CheckUsers with its own request page. In that case its not something they can handle (policy-wise) The request should then be made on the English Wikipedia on that page. --Wiki13 talk 01:00, 31 December 2017 (UTC)
    This issue is not only in English but also in Malay and Japanese, so I do not think it is something that English can handle.--익명을주고 싶다 (talk) 02:15, 31 December 2017 (UTC)
    Okay, then I might have misunderstood that part by not reading correctly. But my point about CheckUsers on the English Wikipedia still stands. Stewards cannot handle request on wiki's that have their own set of CheckUsers to handle requests and investigations. --Wiki13 talk 02:23, 31 December 2017 (UTC)
    Not done This is a matter for English Wikipedia. For cross-wiki checks the request is not specific enough. Ruslik (talk) 13:28, 31 December 2017 (UTC)

    AltStyle によって変換されたページ (->オリジナル) /