Steward requests/Checkuser

To request checkuser access, see Requests for permissions.

←Requests and proposals

Requests for CheckUser information

Archives (current)→

This page allows you to request checkuser information on Meta or a wiki with no local checkusers. If this is an emergency, please contact a steward on the #wikimedia-stewards^connect IRC channel.

Stewards: All requests should be archived when fulfilled.

Steward requests/Checkuser/Indicators

Requests for Meta

When adding new requests for Meta (this wiki), please use the {{checkuser}} template to list the user names in question, which simplifies investigation. For example, "{{checkuser|Jimbo Wales}}" will result in: Jimbo Wales (talk • contribs • deleted contribs • logs • block user • block log • CentralAuth • AllContribs • checkuser • investigate)

Please use headers in the format "username @ meta", such as "Jimbo Wales @ meta".

Requests for other wikis

When adding new requests, please be sure to specify the wiki on which you want the check to be performed. Note that many projects have a local checkuser procedures, and checkuser information on these wikis should be requested locally; see also Steward handbook.

Please use headers in the format "username @ wiki", such as "billy @ enwikisource".

Please place new requests at the top of this section - thanks

---

Local checkuser request pages:

• Wikipedia: ar • cs • de • en • es • fr • it • ja • pl • ru • simple • sv
• Wikibooks: en
• Wikiquote: en
• Commons: all languages

dhardy @ enwiki

The following discussion is closed.

Hello. I am an American graduate student doing research on Wikipedia. I would like CheckUser access to perform a research study. I am not sure if this is the correct forum or process to make this request. Please advise. Thank you. --Dhardy 23:08, 5 February 2008 (UTC)

Hi. First of all, this is a page for CheckUser requests. Granting CheckUser rights is over here. Thirdly, as an English Wikipedia editor, you are to request such things to the appropriate page on the English Wikipedia itself. However, seeing as you're not an ArbCom member, nor have you been elected as a CheckUser on that wiki, I'd say that your chances of getting this user right are close to 0. Especially if you are going to use information, that is subject to privacy policy, in your research study. Thanks, --FiLiP ¤ 23:29, 5 February 2008 (UTC)

H92 har vært i lomma på lommemannen @ nowikipedia

The following discussion is closed.

There has been some user accounts created with unacceptable names. This one means “H92 has been in the pocket of The Pocket Man”. Try also User:Tidligere bruker 36 (it has been renamed, because of the name). Is this the same person/IP address? Is there more users at nowikipedia who come up in the results? — H92 (t · c · no) 21:44, 25 January 2008 (UTC)

results:

Hi, the accounts seem to be the same user, no more users found but no:User:! ! ! Å gid, å gid! H92 er homo! [1] You might want to block. Two more (already blocked) older bad username creations were found for that network, probably not the same user though. Best regards, --birdy geimfyglið _{(:> )=|} ∇ 23:07, 25 January 2008 (UTC)

OK. User:! ! ! Å gid, å gid… is User:Tidligere bruker 36, as it was renamed (it means something like “Oh no, oh no! H92 is gay!”). The accounts were blocked after creation. Thanks for your help! ;) — H92 (t · c · no) 17:32, 26 January 2008 (UTC)

Vilallonga@ca.wikipedia

The following discussion is closed.

I have benn accused to have a puppet user called ca:usuari:Socarrat here. I want to demonstrate that's not true and me and Socarrat are different users. When I went out from catalan wikipedia in march 2007 I created in may 2007 a new user without using my old account, due to some harassements with another user and his three puppets, now discovered. So, please, may you check the information for these three users i ca.wikipedia? Thank you!

• ca:usuari:Vilallonga (me)
• ca:usuari:Socarrat
• ca:usuari:Tanguy (my puppet)

— The preceding unsigned comment was added by Vilallonga (talk) diff, --birdy geimfyglið _{(:> )=|} ∇ 11:01, 20 January 2008 (UTC)

 Declined, --birdy geimfyglið _{(:> )=|} ∇ 11:01, 20 January 2008 (UTC)

This decision is not helpful. Vilallonga · (digui digui) 11:10, 20 January 2008 (UTC)

How about that: similar case. Vilallonga · (digui digui) 11:14, 20 January 2008 (UTC)

Yes, that was my error, I somehow thought there was vandalism involved. This should not have done by me, thanks, --birdy geimfyglið _{(:> )=|} ∇ 11:45, 20 January 2008 (UTC)

General remark: It is not possible to prove non-relatedness of accounts. It is only possible to decrease the probability that two accounts are used by the same person, but it can never definitely be 0. --Thogo (talk) 13:09, 20 January 2008 (UTC)

With the mentioned probability is enough to prove that. I think so. Vilallonga · (digui digui) 14:42, 20 January 2008 (UTC)

If I may comment, I suggest doing the checkuser, with the explicit mention that this maynot prove 100% that accounts are unrelated. drini ^[es:] _[commons:] 16:27, 20 January 2008 (UTC)

With the checkuser I'm satisfied. Vilallonga · (digui digui) 18:05, 20 January 2008 (UTC)

Please, someone can do the checkuser? Thank you, Vilallonga · (digui digui) 17:05, 29 January 2008 (UTC)

I've carried out the checkuser check. Socarrat doesn't seem to be related to the other two. The ones you claim to own do match somewhat (which was expected). Again, I must reiterate: CheckUser tool cannot tell with 100% certainty whether a user is not a sockpuppet of someone else. So, these findings cannot be completely accurate. Thanks --FiLiP ¤ 17:31, 29 January 2008 (UTC)

Thank you! This information is ok for me! Vilallonga · (digui digui) 12:17, 30 January 2008 (UTC)

Andranikpasha

The following discussion is closed.

ru:User:Andranikpasha local CU (note the involvement of User "Hayk" and "Wind")
en:User:Andranikpasha (notice this user page says his name is "Ashot") local CU
simple:User:Andranikpasha
hy:User:Ashot
ro:User:Ashot
fr:User:Ashot
217.118.95.* on en ru fr de hy bg ar tr uk pl meta
195.218.222.149 on ru en hy and ro

The Russian Andranikpasha has been banned due to sock abuse and edit warring at ru:Википедия:Проверка участников/Samwel which was raised by ru:User:Hayk. Of interest is that the page User:Hayk is vandalised on a number of wikis by the same IP just prior to them being banned from ruWP.

Evidence to presume the accounts are the same person

• On Meta, the IP signs this as "Ashot"
• [2][3]hy IP followed by hy user Ashot 12 mins later, and later by IP 195.218.222.149.
• On the deleted page s:User:Hayk, it says "Ashot-i hayrenasirakan account" (I cant make out what this is, but it appears to be talking about an account called "Ashot-i", which could be a wikimedia project account name)
• On bg.WP IP 217.118.95.46 requests a translation of en:Andranik_Ozanian into bg, and signs Andranikpasha. The IP returns days later and signs as Andranikpasha again.

Attacks

• Attacks on Hayk: [4], [5], [6], [7], s:ru:Special:Contributions/217.118.95.43, [8], [9]
• Attacks on Spy1986: [10]
• Attacks on EvgenyGenkin: [11][12][13][14][15]
• Attacks on Wind. [16], "Fascist"
• Other attacks: ru

After the Russian user was banned, the English Andranikpasha user was created and soon became subject to Arbcom. Recently the parole on English user has been lifted per no incivility. If the user is the same that was banned from another wikimedia project for breaking their rules, I think this should be known to avoid gaming the system by pretending to be a new user and receiving the benefit of the doubt all over again. The English user Andranikpasha has been constantly warned about poor sourcing, edit warring and stonewalling, but the user has also created new articles, so if it is the same user as was banned on the Russian sub-domain, the user appears to be reformed a little.

The IP contributions to enwiki are very similar to those of the English Andranikpasha. By following the interwiki links on the other sub-domains, it appears that those contribs by these IP ranges are also very similar, such as:

• ru:Акопян, Акоп (ASALA), ru:Список операций АСАЛА, bg:АСАЛА, , fr:Armée secrète arménienne de libération de l'Arménie, de:Asala, simple:Armenian Secret Army for the Liberation of Armenia. hy:Քննարկում:Հայաստանի ազատագրության հայ գաղտնի բանակ also mentions ASALA.
• tr:Ermeni Devrimci Federasyonu [17][18][19]
• hy:Հայոց Ցեղասպանություն [20] [21] [22] [23] [24]
• fr:Massacres de Şuşa, hy:Շուշիի ջարդեր, de:Schuschi-Blutbäder, simple:Shushi Massacres‎. English user Andranikpasha and myself have been heavily involved in this English article, often in disagreement.
• bg:Шарл Азнавур, fr:Charles Aznavour, de:Charles Aznavour, pl:Charles Aznavour, tr:Charles Aznavour, simple:Charles Aznavour: [25][26][27][28]; hy user Ashot's first contrib and another.
• de:Andranik Toros Ozanian, en:Andranik Toros Ozanian, ru:Озанян, Андраник Торосович ro:Andranik Ozanian: [29][30][31][32][33], [34][35] going right back to days after registering in August. fr:Andranik Toros Ozanian‎ was created by Ashot. IP 195.218.222.149 added the ro iw on enwiki and created the rowiki article; later that day on ro, the article is edited by new user "Ashot"
• hy:Արմեն Գրիգորյան simple:Armen Grigoryan, simple:Krematorij, en:Krematorij [36] [37] [38] [39] [40][41]
• hy:Հովհաննես Շիրազ [42] [43] [44]

As I cant read the diffs, I am limited to concluding that this person using this IP range edits similar topics on en, bg, fr, de, hy, and ru subdomains, and those topics are the same that the the English Andranikpasha concentrates on; I presume the same POV will be found in those diffs. The contribs that are of a similar nature occur before and after the personal attacks on User:Hayk, so I think it is reasonable to assume that the IP contribs are all the same person. Should the 217.118.95.* contribs also be tied to the user Andranikpasha, then the users propensity towards user page vandalism, personal attacks and incivility is quite clear. John Vandenberg 07:19, 20 December 2007 (UTC), added simple:User:Andranikpasha and hy:User:Ashot, and separated attacks per target John Vandenberg 04:55, 21 December 2007 (UTC), added IP 195.218.222.149 John Vandenberg 05:46, 21 December 2007 (UTC) correlated more diffs between en:Andranikpasha and hy:Ashot John Vandenberg 06:28, 21 December 2007 (UTC) added IP 217.118.95.46 signing as Andranikpasha John Vandenberg 06:38, 21 December 2007 (UTC) added ro:Ashot John Vandenberg 09:33, 21 December 2007 (UTC) added fr:Ashot John Vandenberg 10:18, 21 December 2007 (UTC)

• I have run some checks on en:wp and I can make the results of my checks available to any steward or CU with a need to know, contact me offline. I'd prefer not to reveal results just yet till other facets of this investigation are carried forward. ++Lar: t/c 01:52, 21 December 2007 (UTC)

• Could you post your results on checkuser-l? I'm interested in them if it helps targetting blocks in fr:wp (the targetted user there has gotten *very* tired of these attacks). Manuel Menal 17:19, 29 December 2007 (UTC)

• I have also run some checks on fr:wp. While most of the edits have been made from 217.118.95.0/24 anonymously, they have also used (at least) four accounts and two IPs that you have not mentioned. I can give them to any steward who asks, or here if you want (I believe this is covered by point 5 from checkuser privacy policy). I've also asked the user that our vandal targetted in fr:wp if they know about any other account/IP. Manuel Menal 16:51, 29 December 2007 (UTC)

• Following advice from stewards, I've posted the results on checkuser-l. Manuel Menal 17:07, 29 December 2007 (UTC)

Following sharing of information between Manuel and myself, and running checks on all the mentioned wikis (which generated a lot of data) I think there is sufficient reason to broadly concur with John's suggested correlations. However some of the linkages are too old for CU data to directly confirm. Specifically, I feel that there is a strong technical correlation between the Andranikpasha ID on many wikis and 217.118.95.* (or 217.118.95.0/24), in addition to the behavioural correlation John has demonstrated. Although there are a few wikis where there are other contributions in this range, this is rare. At least one wiki (fr:wp) has range blocked this IP range already and it may be worth keeping an eye on other wikis as well. I will share this data with CU's or answer questions from admins, as appropriate. This was a fairly large set of wikis to check, it is possible that I have not checked everything I should have yet. Please advise of any questions or concerns. ++Lar: t/c 05:46, 4 January 2008 (UTC)

What action would you recommend on this user? --85.96.107.35 16:13, 7 January 2008 (UTC)

I think you forgot to log in, perhaps, whoever you are? Much of this is relatively old and there are signs that the user is either trying to turn a new leaf, or at least restrain the most troublesome activity somewhat, although as can be seen on en, they are not willing to acknowledge they are the user, the evidence is compelling (as always, no CU indication is ever a guarantee, it's just a probability estimate). I'd block on behaviour as warranted. For many wikis there are no contributions other than this user in the entire 217.118.95.0/24 range, but for some, there are, so having a local checkuser check, (or a local sysop can ask me for more detail, or both) before rangeblocking seems prudent. But if the behaviour recurs I'd block. I'm not sure at this point with the change in behaviour pattern (for the better) that a range block in advance is called for. ++Lar: t/c 20:05, 7 January 2008 (UTC)

Malay (MS)

The following discussion is closed.

I would like to request block for ID creation if it belong to same IP user. The reason is that it is being used to vandal pages (persistanty). Keep creating new ID. Belived the IP was block earlier, but new ID creation was allowed.

Believed from Malaysian IP.

• ms:user:Indon esial - bangsa koeli, PATI & kriminal:Indon esial - bangsa koeli, PATI & kriminal * Translation Curse Indonesian
• INDON-esial * Translation Curse Indonesian
• FuckIndonesia

Believed from Indonesian IP.

• Indon
• Malon
• Malon, Malingsia OoN
• Saye nak sabotaj Petronas * Translation = I want to sabotaj Petronas.
• Malingsia.com * Translation = Curse Malaysia
• BadutWi
• Suharto memperkosa Mahathir * Translation = Suharto rape Mahathir

All above user have been permanant block. However, they keep logging under improper name. Yosri 10:35, 2 February 2008 (UTC)

 Confirmed as highly likely same user. 2 more found: Suharto memperkosa Mahathir and Aku minah Indon, the IP is dynamic but a range could be blocked, please contact me if You want to do this, best regards, --birdy geimfyglið _(:> )=| ∇ 12:49, 2 February 2008 (UTC)

Since it is dynamic, I guess we have to live with it for now. Thanks for your assistant. Yosri 13:40, 13 February 2008 (UTC)

az.wikipedia

The following discussion is closed.

Hi. I am here on behalf of all active users from Azerbaijani wikipedia . First I want to inform you that azeri wikipedia does not have user with access of check user. So we came to the decision to request you for checking the user Uannis and sysop Memty. Because we suspect that on the 18th of January, 2008 sysop Memty gave his username and password to the user Uannis for deleting pages in the category of speedy deletion during a day. But Uannis did not missed this opportunity and deleted more than 4000 articles and media files without showing any reason, blocked the user Kızılsungur. We discussed this issue in the community protal. Uannis denies all the blames, Memty does not want to write anything. So we will be pleased to meet you in azeri wikipedia and hope that you will solve this problem.

P.S. : By the way here are the signatures of users for check user request. "Çağıraq" means let us call the check user :). We only want you to check above mentioned users IP numbers, which were active on the 18th of January. If you check the contributions of both users you can see that Uannis was not active on that day. Because he used the username of Memty all day.

I have information that Uannis sometimes using ip from internet cafe. Not from home. So please be very attentive. Thanks in advance.

--Vusal1981 01:15, 4 February 2008 (UTC)

Likely Two IPs shared both accounts on January 17. That's all I could find. drini ^[es:] _[commons:] 01:22, 4 February 2008 (UTC)

So it is an evidence that Memty gave his account to Uannis?

--Vusal1981 01:25, 4 February 2008 (UTC)

you have to ask them. All I can say is that there is an IP that used both accounts on the same day with 5 mnutes difference, and the same with other ip. drini ^[es:] _[commons:] 01:27, 4 February 2008 (UTC)

Thank you very much. But this user was very active on the 18th of January. You can Look at here : Memty

Uannis

Why it is more important because he vandalised wikipedia during one day

--Vusal1981 01:32, 4 February 2008 (UTC)

Dear stewards. After steward Drinis checking I put the results to the az wiki community portal. But sysop AMD does not want to block the user Uannis. Because they are friends. But I am again writing here on behalf of azeri wiki community. They all want Uannis to be blocked as a result of vandal activity on the 18th of January. AMD again and again does not listen to us and using his authority. Uannis also blocked the user Kizilsungur using the account of Memty. I think that you have to write to AMD as a steward. Because his does not listen to anybody in wikipedia. We do not have another active sysop to tell. Having look at this situation you can see that it is teh breach of unwritten rules. Sysop gave his account to the user. Of course it is not to be allowed. Thanks in advance.

--Vusal1981 12:21, 4 February 2008 (UTC)

id.wikipedia

There has been a vandal on Indonesian Wikipedia named id:user:Go fuck your mother!!!!. However I suspect that this user comes from Malaysia, is it possible to check whether there is someone on ms: Wikipedia who shares his IP address? Thanks! Meursault2004 17:55, 7 February 2008 (UTC)

I just found out that this user also made some anti-semitic remarks and also some abusive remarks about users on Malay Wikipedia intended as unfunny juvenile joke. He placed this remark on the now deleted artikel id:Partai Nazi Malaysia

'''{{PAGENAME}}''' adalah sebuah partai yang didirikan oleh Whjayg. Partai ini didirikan demi membunuh semua [[Yahudi]] di [[Malaysia]]. Yahudi yang pertama ingin dibunuh adalah Edmundwoods.

Translation: '''{{PAGENAME}}''' is a party which has been set up by Whjayg. This party was erected in order to kill all Jews in Malaysia. The first that they want to kill is Edmundwoods. Meursault2004 15:59, 8 February 2008 (UTC)

Not done, sorry, but there are local checkusers, please ask them to run the check, if it is a global issue, they can share the results with us on the ml, thanks, --birdy geimfyglið _(:> )=| ∇ 16:09, 8 February 2008 (UTC)

Sorry, I just saw, You wanted a checkuser on ms wikipedia, please can You come online in #wikimedia-checkuser^connect, since You are checkuser on id and we can compare the results easier, my nick on IRC is "spacebirdy", best regards, --birdy geimfyglið _(:> )=| ∇ 16:12, 8 February 2008 (UTC)

unfortunately I don't have IRC. Meursault2004 16:15, 8 February 2008 (UTC)

It would be good, if You could find some java client or maybe chatzilla, to come online, if not please Special:Emailuser/Spacebirdy me Your results, I will then add it to the ml, thanks, --birdy geimfyglið _(:> )=| ∇ 16:21, 8 February 2008 (UTC)

(P.S. see #Malay (MS) to which this might also be related. --birdy geimfyglið _(:> )=| ∇ 16:48, 8 February 2008 (UTC))

Done, results sent to checkuser-l mailing list, further steps should be discussed, best regards, --birdy geimfyglið _(:> )=| ∇ 19:33, 13 February 2008 (UTC)

Japanese Wikiquote

The following discussion is closed.

Please check on q:ja:user:Kanji@ja.wikiquote. I suspect if it is a sockpuppet of recently banned from several Japanese projects due to trolling and impostering. From edit patterns, this account may have shared the same IP address with the recently blocked editors either anon or registered, and with b:ja:user:城南. Further details may be given on IRC per query. --Aphaia 04:49, 9 February 2008 (UTC)

Done, results are given to the checkuser-l-ml, best regards, --birdy geimfyglið _(:> )=| ∇ 11:50, 9 February 2008 (UTC)

See also

• CheckUser Policy

General requests for: help from a Meta sysop or bureaucrat · deletion (speedy deletions: local · multilingual) · URL blacklisting · new languages · interwiki map

Personal requests for: username changes · permissions (global) · bot status · adminship on Meta · CheckUser information (local) · local administrator help

Cooperation requests for: comments (local) (global) · translation