Meta:Requests for CheckUser information/Archives/2017

Institute-Info

Status:    Not done

Institute-Info on your user page says to speak the languages ne and mai, the same languages as Tulsi Bhagat spoke. 20px Alvaro Molina ( - ) 09:27, 11 February 2017 (UTC)

  CheckUser is not for fishing? Are languages now enough for a CU?? Luke081515 10:59, 11 February 2017 (UTC)
First, we cannot give an account --> IP connection like that, so   Declined for that part of the request. I don't think there is sufficient behavioral evidence to warrant a check here, but judging by the edits I think it's probably a Junior sock. I'll keep an eye on it. – Ajraddatz (talk) 11:08, 11 February 2017 (UTC)

SEThorpe

Status:    Done

Admitted as much on Steward_requests/Permissions and created the account solely to discourage the promotion of CheckUsers on Wikispecies. Blocked on en.wp for abusing multiple accounts and blocked several other places for cross-wiki problems (e.g. has no less than 20 sockpuppets at species:). Also lodged a CheckUser at en.wp, since he has edited there. —Justin (koavf)TCM 23:52, 11 February 2017 (UTC)

If no one wants to investigate with the CU tool, then please just block outright with the standard admin permissions. Thanks. —Justin (koavf)TCM 23:56, 11 February 2017 (UTC)
@Koavf: nothing interesting found not here nor at wikispecies. --Vituzzu (talk) 13:08, 12 February 2017 (UTC)
@Vituzzu: Sockpuppet is blocked, which is what was important. Thanks. —Justin (koavf)TCM 18:01, 12 February 2017 (UTC)

Mardon A & AWAY1

Status:    Not done
moved from SRCU

Users under one user IP and voting in different projects, thus violating the requirements of the election procedure. "Since we have no local CheckUser, I ask you to clarify, the IP user Jaloliddin Madaminov Mardon A and AWAY1. Thanks.--Шухрат Саъдиев (talk) 03:42, 13 March 2017 (UTC)

@Шухрат Саъдиев: Could you please clarify on which project you want this check peformed and expand a bit more the reasons of it? Diff links and pages will help us better understand the situation. Best regards, —MarcoAurelio 15:43, 16 March 2017 (UTC)
Same user. Similarly Jaloliddin Madaminov, AWAY1 and Mardon A under different names writes articles:
  1. See [1] user:Mardon A and user:AWAY1
  2. Registered at AWAY1 and meta.wikimedia [2] 06.02. 2017 user:Jaloliddin Madaminov?
  3. All vote in Wikipedia projects [3] and other projects.Thanks --Шухрат Саъдиев (talk) 12:02, 17 March 2017 (UTC)

┌──────┘
So the alleged abuse at Meta is suposed votestacking in RFNL pages. I'm going to ping @StevenJ81, since he closely monitors those pages and shares the same opinion. —MarcoAurelio 12:21, 18 March 2017 (UTC)

@MarcoAurelio: There's clearly commonality of interest here, and whether on-wiki or off-, at least two of these users admit to being "friends" (see Special:Diff/16358615). Does it exactly rise to the level of puppetry of some kind? I'm not inclined to think so, at least with respect to the edits on the RFNL pages on Meta. I'd add that there was really no doubt that the Tajik Wikiversity and Wiktionary projects would be considered "eligible" by the Language Committee. And !votes won't affect the final approval of these projects one way or the other. The projects will be approved if a community of people gets together and creates sufficient content in the projects over a sufficient period of time. The projects will not be approved if that doesn't happen. (Note: I cannot speak to the users' behavior on any other project.) StevenJ81 (talk) 19:26, 19 March 2017 (UTC)
  Not done then. —MarcoAurelio 15:36, 26 March 2017 (UTC)
This section was archived on a request by: —MarcoAurelio 15:36, 26 March 2017 (UTC)

TaherNagati

Status:    In progress

I just blocked PedroPinto, ZyzzBrah69 and ZezPreh96, as they all are clearly of the same guy. After reading the message that they wrote and see the edits of TaherNagati on Commonswiki, those accounts look like their socks. It would also nice to know if there are more socks. Matiia (talk) 22:51, 6 April 2017 (UTC)

Taher's response :

Hi! i'm Taher the guy who has most votes (photo 28) on wiki loves africa. first of all i really appreciate that judges accepted my photo as one of the bests in the contest!

Second, My friend said that he only created those accounts to vote for me. third, i just shared the link of contest to a couple of friends informing them about it and i said to some of them ' if u like my photo, i'd appreciate if you vote for it ' so i'm not forcing them, just suggesting for some friends ( like 6 friends or something ) -I saw many of people in contest doing this publicly in facebook and porbably all of them did it privately (so i'm not the only one and it seemed okay for everybody).

Why are you blaming me only for this? it's obvious that almost everyone in this contest shared link with their friends to vote for them.

and i only did this because it's logically acceptable (i'm not forcing them to vote for me) and because it's not against the contest's rules.

I hope you understand well that i warned my friend not to create any fake profiles again to vote for me, and i stopped informing my friends about the contest.

thank you for your time.

sorry for repeating this text i just have to verify that you read it as soon as possible, and i'm still new in wikimedia. --TaherNagati (talk) 23:20, 10 April 2017 (UTC)

Spambots at meta

Status:    Done

@Ajraddatz, Barras, MarcoAurelio, Trijnstel, and Vituzzu: If you can have a look at meta abuse log you will see an absolute stream of spambot hits for 9 April. Can someone please investigate to see whether this can be managed by a range block. Thanks.  — billinghurst sDrewth 23:34, 9 April 2017 (UTC)

Done. No rangeblocks possible. – Ajraddatz (talk) 13:30, 10 April 2017 (UTC)

Chitral CSX

Status:    Done

User created to ask a rename in a long-term abuse. See here. The requested username seems similar to Sher Aziz I, blocked in Wikimedia Commons, and Sher Aziz, a global locked user. Regards, Jmvkrecords (Intra talk) 16:14, 13 May 2017 (UTC).

  Note: phab:T131207 is still not resolved so rename requests ain't logged via CU, so I'm not sure how a CU would be of any help here. It is obvious that all three accounts are vandals/socks per their blocks at other places and Meta as well. Regards, —MarcoAurelio 21:57, 15 May 2017 (UTC)
  Note: Please note that Sher Aziz (I) accounts are   Stale from a CU-POV as their edits cannot be queried using this tool anymore. The only account who might have some data is Chitral CSX, but then I have nothing to compare it with. I am therefore   declining the request as it's technically not possible in this case to relate all three accounts via CU. You'll have to rely on behavioural evidence. —MarcoAurelio 22:01, 15 May 2017 (UTC)
MarcoAurelio, I've added some information from June/July 2014 Commons checks on Sher Aziz and Deepak Chitrali (sock) here in case it would be useful. Эlcobbola talk 20:58, 18 May 2017 (UTC)
CU data is   Inconclusive on Meta, having compared it with elcobbola's data. However I shall note that Chitral CSX is blocked on enwiki as per this SPI which if I read correctly might somewhat be related to this other one?. If those cases are related then the accounts will also be related as well. Given the abuse of the global rename feature by Chitral and their block on enwiki, I am globally locking the account. —MarcoAurelio 12:22, 20 May 2017 (UTC)
Notwithstanding the above, the accounts, Chitral CSX, Transformer X, Akbar ali ghazi, History of Baltistan, Παναγιωτα ιωαννου-σαρρα, Rehmat Aziz Chitrali Gold Medalist & Rehmat Aziz Chitrali appear related from a technical point of view and are also blocked elsewhere. —MarcoAurelio 12:31, 20 May 2017 (UTC)

Spambots

Status:    Not done

Long string of "Kardashian" spambots showing in abuselog, would someone please have a look to see if we can manage them with a range block, thanks. If you want an easier list to grab see my block log Special:Log/block/billinghurst  — billinghurst sDrewth 10:14, 18 May 2017 (UTC)

@Billinghurst: Any filter in particular? I am not seeing Kardashian anywhere? —MarcoAurelio 11:19, 21 May 2017 (UTC)
  Not doneMarcoAurelio 13:55, 28 May 2017 (UTC)

Wikipedia Zero abusers fishing

Status:    Not done

No blocks, but suspicious:

New suspects:

I hope I got all the sleeper accounts, but I'm not faithful. (Apparently, I missed one) Are there accounts I missed? Did they register using a WP0 address? If they did, can abuse filters tag WP0 new user sign ups? With pirates going to every wiki, it would be nice to centralize this signal. Dispenser (talk) 17:37, 13 September 2017 (UTC)

Being super-late here but marking this as   Not done then and   Stale now. Checks were run on SRCU for several of this kind of accounts in order to find a blockable on-wiki range with no satisfactory result. Either the ranges where too wide that MediaWiki didn't allowed its blocking or no common range was found. Since then puppet and other antiabuse measures have been put in place to counter the abuse. —MarcoAurelio (talk) 21:06, 7 December 2017 (UTC)
This section was archived on a request by: —MarcoAurelio (talk) 21:08, 7 December 2017 (UTC)

Arepticous

Status:    Done

The two bottom accounts registered during November, after Wikientertain was proposed by User:Arepticous. Both accounts have edited only on Meta, with the goal of finding projects and supporting them. The accounts supported the same type of wiki (social wikis) and have supported the same wikis. Theis first edits were to their user pages and their user talks, with a striking similarity between the messages. Thanks, Zhangj1079 talk 05:00, 28 November 2017 (UTC)

Without using the CU tool; behaviour suggests either sockpuppetry or meatpuppetry, which in any case can be grounds for blocking the accounts. —MarcoAurelio (talk) 21:18, 7 December 2017 (UTC)
  Confirmed--Vituzzu (talk) 12:16, 31 December 2017 (UTC)
This section was archived on a request by: —MarcoAurelio (talk) 11:24, 4 February 2018 (UTC)

Ookuninusi and Freemanmne

Status:    Done

See [4], if both are not one person then why such overwritting within 5 minutes is "good"? --Liuxinyu970226 (talk) 11:54, 31 December 2017 (UTC)

Feel free to check. I used a commentary because of my conviction for the best way to explain the question of the montenegro language.--pelivan   (talk) 13:06 30. December 2017 (UTC)
Yes, just note that I don't have any interests to the political issues in the former Yugoslavia countries. --Liuxinyu970226 (talk) 12:11, 31 December 2017 (UTC)
  Unrelated--Vituzzu (talk) 12:13, 31 December 2017 (UTC)
@Vituzzu: Thx, I'm so sorry for my misreading. --Liuxinyu970226 (talk) 12:15, 31 December 2017 (UTC)
This section was archived on a request by: —MarcoAurelio (talk) 11:24, 4 February 2018 (UTC)