Meta:Requests for CheckUser information/Archives/2010

January

PauloHelene and other socks

Users
Rationale

They are continuously making poor quality of translations in Korean. Because of a number of editions, Translations in Korean are becoming unrestorable. Their patterns of edits are:

  • Using terms which don't exist in Korean language.
  • Not fit in Korean grammar.
  • Using machine translation which is considered as evil in Korean due to low quality of translation.
  • Choosing improper words in translations
  • Translations might be contradict to English version.

Please investigate his socks to keep translations under safety. cf) These users are blocked in both Korean and Japanese wikipedia because of their destructive contributions(I don't know whether this terms should be used) in translation. I think they are for block evasion in Meta to avoid to meet Korean or Japanese administrators. Kwj2772 (msg) 16:11, 14 August 2009 (UTC)

Results

This request was handled time ago as part of this request but as far as I know it was not noted here so, for the archive:

  •   Confirmed PauloHelene == Mkpaulo == this bunch.
  • Accounts got globally locked, except PauloHelene. If disruption starts again I suggest to request a block for the main account.

— Dferg (disputatio) 20:51, 6 January 2010 (UTC)

MediaWiki Russian proposal supporters

I ask to check for abuse (open proxies or sockpuppetry) the following users who supported this proposal:

I have a reason to suspect that MediaWiki Russian was intended as a playground project by some of long-term trolls from Russian Wikipedia. vvvt 16:56, 4 January 2010 (UTC)

I Support this request. mw:User:Grigol now blocked on the basis of indirect information (see mw:User talk:Grigol), not related to his activities on MW.org. I need to understand, I can unlock it or not.--Kaganer 13:16, 5 January 2010 (UTC)
Please also run check on MediaWiki.org website (as local checkuser Brion VIBBER has left Wikimedia). --Kaganer 15:03, 5 January 2010 (UTC)
Also possible puppets:
--Kaganer 15:11, 5 January 2010 (UTC)
See also cross-wiki request: Steward_requests/Checkuser#Grigol@mediawiki.org. --Kaganer 15:59, 5 January 2010 (UTC)
There are two groups of matching users: {Kolwar, Maxim Dorkin} and {Dominik1969, Fillimor, Grigol}. The first group used a web proxy, 208.97.128.0/18, which I blocked globally for six months. —Pathoschild 21:59:31, 05 January 2010 (UTC)
Thanks. What about mw:User:Dorkin Maxim (and my steward request)? No mathes? --Kaganer 00:35, 6 January 2010 (UTC)
This is for Steward requests/Checkuser. I've seen you already did the request so a steward will help you as soon as they got the request. — Dferg (disputatio) 17:15, 7 January 2010 (UTC)

February

Driste, Trần Nguyễn Minh Huy and Mr. man

Status:    Done

Mr. man is a cw socker who socks/hijacks accounts to get different permissions such as admin/crat etc. Welcoming new accounts is something he often does; along with posting comments at SRP. The account Driste has followed this pattern. Trần Nguyễn Minh Huy requested admin rights@viwikiquote few minutes after creating an account and has been requesting the right prematurely since. I suspect the account has been hacked as it is odd that the account Driste immediately posted comments at the SRP request after being created. Please check these accounts. Pmlineditor  14:01, 13 February 2010 (UTC)

No! --DristeLet's talk 14:05, 13 February 2010 (UTC)
I do not think you disparage so was out here, next time please do not speculate style, I also an active member contributions on Vietnamese Wikipedia. This may offend my honor!! My account opened in Meta long, I get the honor to declare their. Can see my user page on Wikipedia to know how I was! --minhhuy*= 14:19, 13 February 2010 (UTC)
No I do not give as Vietnamese! I do not know any word on this language. It is impossible to give you my Vietnamese! --DristeLet's talk 14:21, 13 February 2010 (UTC)
@Minhuy: If you are not a sock, my sincerest apologies. Pmlineditor  14:25, 13 February 2010 (UTC)
I assure you I am not the sock! --minhhuy*= 14:38, 13 February 2010 (UTC)

┌────────────────┘
Done. Driste matches Ervinsteaua, Farct, Mr. man, and locked users Ervin1, Ervin C., Redfox, Sirty, and Taill. Trần Nguyễn Minh Huy is not obviously related. —Pathoschild 14:46:05, 13 February 2010 (UTC)

Thanks. Unblocked accounts blocked. Maybe a lock will be good too. Pmlineditor  14:49, 13 February 2010 (UTC)
Anyway I also understand the feeling doubted how. :D --minhhuy*= 14:53, 13 February 2010 (UTC)

┌─────────┘
Another one, Keyyss (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser). Probably, it's quacky, but even then.... 13:25, 23 February 2010 (UTC)

  Confirmed, also discovered unblocked accounts Jacobos (talkcontribs), Redfox (talkcontribs) and Moccococ (talkcontribs).
— Dferg (talk) 14:08, 23 February 2010 (UTC)
All blocked now. Thanks for the check! Pmlineditor  08:08, 24 February 2010 (UTC)

March

CroatianMontenegro

Status:    Done

Looks like it is a sock of blocked User:CroForge, same behavior, same harrasement he was blocked for. He votes on the proposal for second time (once as original porposer, and once in support). --WizardOfOz talk 19:19, 21 March 2010 (UTC)

Results

— Dferg (talk) 14:24, 22 March 2010 (UTC)

September

Suspected votestacking

List of users
Rationale
  • !Vote page: Proposals for closing projects/Closure of Acehnese (2) Wikipedia.
  • Si Gam Acèh was globally locked along his sockpuppet Muhammad Nabil Berri for cross-wiki disruption and public discussion here.
  • Old discussion page, speedy closed as bordering vandalism can be found here.
  • It is rather odd & suspicious that after the rejection of a that old closing proposal a new one appears along with supporting users who have been inactive since 2008/2009 (see luxotool), both created on incubator wiki and with less than 100 edits globally. Appearing suddenly only to !vote.
  • Since I have commented, I prefer somebody else to have a look.

Thank you, --dferg ☎ talk 12:01, 15 August 2010 (UTC)

Results
  • Interesting - one is out of time now (Muhammad Nabil Berri). But the other three all appear to be puppet accounts are are blocked as such now. There is another account I'm suspicious of & will share the data on. In addition I've blocked Jiyuukaminari (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser) - pretty sure they are involved. Cheers --Herby talk thyme 12:11, 15 August 2010 (UTC)
    Thank you very much. I'm in the meanwhile closing the proposal for blatant sabotage with sockpuppets. --dferg ☎ talk 12:13, 15 August 2010 (UTC)
    Jiyuukaminari (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser) is not a Si Gam Acèh (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser), i know him, i stay some city --Fadli Idris 14:58, 15 August 2010 (UTC)
    See en:WP:MEAT. Jiyuukaminari wasn't blocked for being the same person as Si Gam Acèh. Despite this, the rationales behind the closure request are still invalid:
    "No more significant activity" and "No more Acehnese speaker" - incorrect, there are ongoing edits currently. Further, there is no requirement that someone be a native Acehnese speaker to contribute to a project.
    "No more admin from Acehnese speaker" - As long as the sysop is able to communicate with contributors, there is no requirement that the sysop be Acehnese at all.
    Future closure proposals like this will likely be treated in the same manner. Hopefully Si Gam Acèh will find something more worthwhile of his time. Kylu 15:18, 15 August 2010 (UTC)
    did you understand this article? i think no, so who can manage ace.wiki if no body know achenes langguage --Fadli Idris 15:54, 15 August 2010 (UTC)
    Actually data strongly suggest the relationship between all blocked accounts. This page is not a forum so please keep further discussions on talk pages please. Thanks. --dferg ☎ talk 16:05, 15 August 2010 (UTC)

Votestacking 2.0

Users
Rationale

Si Gam Acèh is a banned Wikimedian using sockpuppets to try to shut down the Acehense Wikipedia. This user had only less than 5 edits before proposing (for the third time) the Acehense Wikipedia for closure. I have high suspicions of sockpuppet abuse. I-20the highway 23:27, 22 August 2010 (UTC)

Results
  •   Unrelated   Unlikely from the CheckUser point of view but not totally unrelated in my opinion (I'll request review). Notwithstanding, I would rather indefblock the user in question for engaging in a campaign of disrupting meta with abusive project closure requests, but that's my personal opinion. If not a sockpuppet, may be a meatpuppet. --dferg ☎ talk 13:34, 24 August 2010 (UTC)
      Blocked as suggested. Kylu 01:59, 26 August 2010 (UTC)

October

213.214.155.10

Status:    Not done

Please check has this IP used to spoofing by fiwiki users (RFC vandalism). --Juhko 13:47, 15 October 2010 (UTC)

  CheckUser is not for fishing Kylu 14:10, 15 October 2010 (UTC)
Do we have here a policy forbiding system spoofing, for example manipulating discussion by using different IP-adresses? RFC vandalism here. (I'm asking because I don't know.) --Juhko 14:22, 15 October 2010 (UTC)
Generally it's RBI. As the fiwiki user (if there is one) would have to be logged in here for us to gain their IP data, perhaps you should take the IP address to the fi.wikipedia checkusers instead, assuming you have a specific person to check? Still, they would have to weigh your request against the checkuser information release policy, lest they give you someone's IP address by means of such a check. Other than it being somewhat appropriate for a logged-out user to close such a page, the worst that could be accused really is misgauging of consensus: There are four folks (including the IP) moving to close the RFC, so it's not actually vandalism. Marking as   Not done for Meta. Kylu 15:23, 15 October 2010 (UTC)

November

Impersonation accounts

Hi, not sure how to go about this, so bear with me. I'm looking at 2 accounts created in the last 48 hours or so, trying to impersonate members of the board with a single purpose, edit one page. Accounts are Matt Halprin (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser) and Sjª (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser). So my first question is:

  • Is there any way to tell if these two accounts are the same person?
  • I guess my second question would then be: does the IP also match another editor, who would then be using sockpuppets?
  • I'm not sure what the third question might be, so I'll wait until I have the answer to the first two.

Thanks a bunch. notafish }<';> 23:50, 22 November 2010 (UTC)

  •   Confirmed - No other accounts found. Tiptoety talk 00:55, 23 November 2010 (UTC)
    Thanks. Just to be sure. This means that the two "fake" accounts were the same person and that you did not find any other account that would match the first two? notafish }<';> 08:21, 23 November 2010 (UTC)
    Correct. Tiptoety talk 18:53, 27 November 2010 (UTC)
    Thank you. notafish }<';> 01:09, 7 December 2010 (UTC)