Jump to content

Steward requests/Checkuser/2022-02

From Meta, a Wikimedia project coordination wiki
Latest comment: 2 years ago by LuciferianThomas in topic Requests

Requests

簡安琪@zh.wikipedia

  •  Confirmed Applejuicegood, 簡安琪, Kkuijdikk, 偉康科技股份有限公司

From a technical point of view. --Sotiale (talk) 08:01, 1 February 2022 (UTC)

Τρύφωνας@el.wikivoyage

Doing... --Sotiale (talk) 08:08, 1 February 2022 (UTC)
  •  Confirmed(global) Giorgos ro, Giorgos mo, Σίμος78, Δώρα79, Δώρα 89, Μιχάλης89, Kwstas789, Twros690, Nikos009, Τρύφωνας, Tzevh89, Nikos8009, Hdjsjiik

All locked now. --Sotiale (talk) 11:06, 1 February 2022 (UTC)

SKeiYuY@zh.wikipedia

  • Unrelated Unrelated SKeiYuY and Piss3311

From a technical point of view. --Sotiale (talk) 11:14, 1 February 2022 (UTC)

光俊@zh.wikipedia

Doing... --Sotiale (talk) 08:02, 1 February 2022 (UTC)
  •  Confirmed Peter cheung 930909, Tony26845, 光俊, Frankie Kwan 980654

From a technical point of view. --Sotiale (talk) 08:07, 1 February 2022 (UTC)

Thank you, and happy Lunar New Year! --Luciferian 14:40, 1 February 2022 (UTC)

Vanished user 999983@zh.wikipedia

  • Unrelated Unrelated between each account

Referring to previous request, perhaps repeating checkuser for them would make no sense. --Sotiale (talk) 10:12, 2 February 2022 (UTC)

Mtriantou@el.wikipedia

  •  Confirmed TomKyr and Mtriantou

From a technical point of view. @Chalk19: Here you are. --Sotiale (talk) 09:37, 3 February 2022 (UTC)

ArlieVosburg5@az.wikibooks

All locked. Perhaps it's best that these spambot locking requests go to SRG, not here. The handling of them is different from normal checkuser. For information on these accounts, see their CA :) --Sotiale (talk) 09:31, 3 February 2022 (UTC)
@Sotiale:, ok, got you. Thanks.--Renvoy (talk) 13:52, 3 February 2022 (UTC)

Koavf at en.wq

Not done, logins do not come up under your account, they only show by IP, and we can't block IP attempts at logging in. Therefore, there is no use for this check. -- Amanda (she/her) 01:41, 2 February 2022 (UTC)

Diraged3@zh.wikipedia

Doing... --Sotiale (talk) 12:48, 6 February 2022 (UTC)
  •  Confirmed Kagomefog, Lastrice, Chippopotanuse, Chippopotanuse2, Diraged3

  • They used VPN.

From a technical point of view. --Sotiale (talk) 12:58, 6 February 2022 (UTC)

Guyiming@zh.wikipedia

  • Unlikely Unlikely between accounts.

  • Some users used VPN.

From a technical point of view. --Sotiale (talk) 13:11, 6 February 2022 (UTC)

TheIndonesianGirl@incubator.wikimedia

 Confirmed TheIndonesianGirl, Sherly6758, EnnoymousUser, Sherly56849. -- Amanda (she/her) 09:01, 7 February 2022 (UTC)

Andyyeung is the first@login.wikimedia

Dealt with -- Amanda (she/her) 22:45, 7 February 2022 (UTC)

Megi Andreadi@el.wikipedia

Doing... --Sotiale (talk) 13:29, 9 February 2022 (UTC)
  •  Confirmed Group 1: Dols 16, Σέβος, Megi Andreadi, Θανος 20, Nikos Krast, Νταμ 9, Zf 176
  •  Confirmed Group 2: Makis ST, Pakman 12, Gerdi 66, Statuti, Κεφαλάκης Ανδρέας του Πέτρου, Kostas Thomopoulos, Hafili, Όγδοος, Βιολιστής, Χρηστης 33, Μόκρις, Vlad Thiers, Anderena, Bwni, Masta877, Mamenem, Ιλ, Jany 56, 47 GC

  •  Confirmed Group 1 and 2
  • Possible Possible Nikoskariofyllis and  Confirmed groups

@C messier: From a technical point of view. This is technical investigation, so be sure to check their contribs before taking action. --Sotiale (talk) 13:39, 9 February 2022 (UTC)

Ανέστης90@el.wikivoyage

  •  Confirmed(global): Nikos49, Μάρκελος, Φώτης90, Σιδέρης, Ζάχαρης, Νικος790, Αντωνης789, Θεοδωρα79, Reros789, Kiki7890, Swkos790, Manos790, Kwtas799, Άντονιν90, Uomas

From a technical point of view. All locked. --Sotiale (talk) 13:27, 9 February 2022 (UTC)

Θοδωράκης@el.wiktionary

Doing... --Sotiale (talk) 12:20, 10 February 2022 (UTC)
  •  Confirmed Θοδωράκης, Χαχανούλης, Apostolos723(2022-01)

From a technical point of view. --Sotiale (talk) 12:24, 10 February 2022 (UTC)

096RThsg3754621jd8RT@zh.wikipedia

Doing... --Sotiale (talk) 11:45, 11 February 2022 (UTC)

From a technical point of view. --Sotiale (talk) 12:02, 11 February 2022 (UTC)

Basa Pulu Kokos@en.wikivoyage

Doing... --Sotiale (talk) 00:53, 12 February 2022 (UTC)
  •  Confirmed both.

--Sotiale (talk) 01:01, 12 February 2022 (UTC)

Thanks Sotiale. --SHB2000 (talk | contribs) 01:25, 12 February 2022 (UTC)

Girma adnew@am.wikipedia

Done, but I I couldn't find any other hidden accounts.. --Sotiale (talk) 13:05, 12 February 2022 (UTC)

Wpcpey@zh.wikipedia

  • From my point of view, Wpcpey did not do IP socking during the blocked period.

--Sotiale (talk) 10:51, 13 February 2022 (UTC)

Леонид Макаров@ru.wikibooks

Hi. Thanks for the good explanation of abuse. We cannot publicly confirm the relationship between any user and IP (or range) here in accordance with our privacy policy. So I can't publish results as to whether or not the IP (or range) is related to the user you requested, but I will take specific action based on the abuse described in your request regardless of that. --Sotiale (talk) 01:14, 12 February 2022 (UTC)

Brownyellowpuppy@zh.wikipedia

Doing... --Sotiale (talk) 10:41, 14 February 2022 (UTC)
  •  Confirmed Group 1: Brownyellowpuppy and 睡睡睡睡睡睡睡
  •  Confirmed Group 2: Letskillthislove, Keroroyl, Whatsmyname

  • Likely Likely Group 1 and 2

From a technical point of view. These may be users who edit in the same place (friends or family), or may be the same user with multiple accounts. The same group used the same type of device. I'm not sure what they are, so I'd recommend investigating the different possibilities and editing patterns before taking action on your local. --Sotiale (talk) 11:31, 14 February 2022 (UTC)

Thank you! Luciferian 12:52, 14 February 2022 (UTC)

Piss3311@zh.wikipedia

  •  Confirmed Group 1: Aoao20, Sumin5
  • Unrelated Unrelated Piss3311 and Group 1

From a technical point of view. --Sotiale (talk) 21:57, 14 February 2022 (UTC)

Xayahrainie43@zh.wikipedia

  • All accounts are already locked. No other action required.

For this user, it appears that stewards in SRG are handling their ranges and accounts together. So if you don't have a special need, you may not need to checkuser. Of course, if you are unsure, you can request. --Sotiale (talk) 11:05, 15 February 2022 (UTC)

123Aristotle@zh.wikipedia

Doing... --Sotiale (talk) 09:41, 16 February 2022 (UTC)
  •  Confirmed Group 1: 現在你可以進行私密瀏覽了, 克羅埃西亞之春, Andy Woho, UDTWNU, 楊忠諭, 德拉瓦, 阿波羅18號, たいわんじん, Yochomachi01, 和平菁英, こてさしえき

From a technical point of view. --Sotiale (talk) 10:49, 16 February 2022 (UTC)

Ruwaym@fa.wikipedia

@Ruwaym: There are local CUs at fawiki, not? Shouldn't you try emailing them first? NguoiDungKhongDinhDanh 00:11, 15 February 2022 (UTC)
Ok, let me try. Ruwaym (talk) 01:27, 15 February 2022 (UTC)

As explained above, please contact local checkuser team. --Sotiale (talk) 06:24, 15 February 2022 (UTC)

@Sotiale @NguoiDungKhongDinhDanh I asked, but don't replying. I mean Huji. Ruwaym (talk) 22:28, 15 February 2022 (UTC)

Royalfanta@zh.wikipedia

  •  Confirmed Group 1: Eibingqilou, Wodishuaicai, Malijihulu, Jinselulu
  • Inconclusive Inconclusive Royalfanta, RachelS299, Amadeozlm

  • Royalfanta used VPN.
  • It is difficult to find a strong technical connection between all accounts in Inconclusive Inconclusive.

Since I'm investigating this user for the first time, I don't know much about the nature of this user. In my experience, this result can be considered in several cases; Some of these are other users. Otherwise, they are the same user, but can be edited on multiple devices in multiple places. The ranges are so diverse that it is impossible to even try to find their sleepers. If it was for the purpose of abuse, it would be a tremendous tenacity. --Sotiale (talk) 12:03, 17 February 2022 (UTC)

Thank you for your help. Three accounts of the  Confirmed group (Eibingqilou, Wodishuaicai and Malijihulu) are taken from a ducked HAM request back in December 2021, and the fourth (Jinselulu) is from today's SPI request, so does this CU result mean that there is consistent abuse in the same range, at least for the  Confirmed group? May I ask if actions were taken against abuse, or even if any can be done? Thanks with regards, Luciferian𖤐 13:44, 17 February 2022 (UTC)
May I also ask if all other accounts checked in this request are using VPNs, or as stated from the local LTA page, in an institution network? Luciferian𖤐 13:59, 17 February 2022 (UTC)

Ρίτα βεριφαιντ@el.wikipedia

Possible Possible at best, they edit from the same country. -- Amanda (she/her) 14:22, 17 February 2022 (UTC)

黄冰楠@zh.wikipedia

Doing... --Sotiale (talk) 04:15, 20 February 2022 (UTC)
  •  Confirmed Group 1: 战争萌动我的前半生, 陆军士官学校, 马其顿方阵, 戦闘力のすぐれた軍隊であった, 第一次世界大戦が日本陸軍に与えた課, 第11条校规, 鎌倉時代の武士道, ガダルカナル島作戦, 拳拳心动, 大阪市, 昭和17年3月,大东亚战争进入炙热阶段, 军队则不战而退, 大阪十万浪人十万野爹, 华北, 国安法は暴徒にのみ影響を与え, 苏奥穆萨尔米之战, 精神强调论, ムエタイの投げ技, 星级酒店高价约啪体操美女运动员, 踢击, 中国女足告别奥运, 対手 ( たいしゅ ) は支那兵以下の弱虫である, 戰國時代の武士道精神, 东京帝国大学法学系, 戦国時代の武士道, 動乱の蔭に, 陳漫(チェン・マン), 日本民族の復興, 핸섬1, 燃烧的太平洋, 刺客列传, 战斗机的座舱里的他是一位真正的魔鬼, 你都抛开事实了,那还谈什么
  • Inconclusive Inconclusive 東條英機台灣地區塊錢給了嗎

  • They used VPNs.

All locked. I'm not sure about 東條英機台灣地區塊錢給了嗎. At least this account is different from group 1. --Sotiale (talk) 04:46, 20 February 2022 (UTC)

NDChang@zh.wikipedia

Looks like the second and third have already been declared confirmed on commonswiki. --Sotiale (talk) 04:14, 20 February 2022 (UTC)
  •  Confirmed NDChang, NoodleChang, 陳畇榛

--Sotiale (talk) 04:51, 20 February 2022 (UTC)

Oh thanks. I wasn't aware of RfCU requests elsewhere Orz Luciferian𖤐 07:35, 20 February 2022 (UTC)

LTA:114.27@zh.wikipedia

  •  Confirmed 5842RSHtghJSghOntj16, 383JddCOub74159, 479cWDHGgfy28fgyb

From a technical point of view. --Sotiale (talk) 10:50, 21 February 2022 (UTC)

Adam Chacko@hi.wikipedia

Doing... --Sotiale (talk) 12:27, 22 February 2022 (UTC)
  •  Confirmed Group 1: Subhash Chanda Bose, चंद्र शेखर आज़ाद , कबीर ग्रंथावली, अलिफ़ लैला, वार्ष्णेय-स्पंदन, गुरदयाल सिंह, Ravindra Kelekar, सहगामी, ब्रज भूमि, Jai Karoli Maa, Vicky vill, हृदयेश, Adam Chacko, ... other locked accounts.
  • Unrelated Unrelated Group 1 and ए. के. उपाध्याय

From a technical point of view. --Sotiale (talk) 12:36, 22 February 2022 (UTC)

Tommy860119@zh.wikipedia

Doing... --Sotiale (talk) 13:01, 22 February 2022 (UTC)
  •  Confirmed Gordon Siu 19780210, Andy Lau 760428 and 光俊 account group

--Sotiale (talk) 13:05, 22 February 2022 (UTC)

हिंदू@hi.wikipedia

Doing... --Sotiale (talk) 12:40, 22 February 2022 (UTC)
  •  Confirmed Group 1: Svartava and स्वार्तव
  • Possible Possible हिंदू and ए. के. उपाध्याय
  • Unrelated Unrelated PQR01

  • Unrelated Unrelated Group 1 and Possible Possible group

From a technical point of view. Blocking all of their ranges would be possible, but that would cause extensive damage. And where there are not many admins, this method is quite difficult. --Sotiale (talk) 12:52, 22 February 2022 (UTC)

Sotiale, I don't think they are going to stop, but anyway, thank you very much. --SM7--talk-- 14:12, 22 February 2022 (UTC)

Pegula128@el.wikipedia

Extended content

Hi, not a usual request but it may be more easy or as a first step to be checked by a checkuser before going to devs: Please check these new user creations, specifically the 75 "Pegula128(number)" new accounts. It is a known troll. How did he pass the 6 new accounts per IP per 24 hours limit? Only a reset on router (usual ISP IP range), a VPN, or some other way? Geraki TL 09:13, 21 February 2022 (UTC)

(non-steward comment) Pegula128 seems to be the master, so I added it to the header. NguoiDungKhongDinhDanh 09:30, 21 February 2022 (UTC)
Sadly, what prevents this is the use of an abuse filter. This is possible because they just need to change their IPs. It will range from reallocating IPs in mobile ranges to utilizing VPNs. Please let me know if they have abuses outside of elwiki. Thank you. --Sotiale (talk) 11:29, 21 February 2022 (UTC)
@Sotiale we already have some abusefilters to prevent him from editing some pages when he edits as anon. We know one of the IP ranges, (the one used here). Is he is now under a different IP range, that we should watch/block/filter? Geraki TL 13:02, 21 February 2022 (UTC)
I'm having a difficulty making a proper comment on those IP ranges, but I'm afraid their ranges are so wide anyway that taking action on all of them could cause widespread damage. Nevertheless if the situation is really serious, you can take action. --Sotiale (talk) 12:25, 22 February 2022 (UTC)

Asdfghjkl1994@zh.wikipedia

I checked Asdfghjkl1994 who was actually the one to post the deletion notices. I noticed no other accounts while checking them. That said, I do not find enough evidence to check Cy0606 and will  Declined that check. -- Amanda (she/her) 01:38, 25 February 2022 (UTC)

Oops that was a typo when I was submitting it, thanks for helping. --Luciferian𖤐 01:55, 25 February 2022 (UTC)

Gemistek@hr.wikipedia

 Confirmed, no sleepers. -- Amanda (she/her) 01:30, 25 February 2022 (UTC)

Whatsmyname@zh.wikipedia

@LuciferianThomas: Just a reminder, but an English based reason for the check is required. I was able to translate enough to get the account was created after the last blocks, but the diffs did not seem to show any sort of connection. Could you please clarify the reason for the check? -- Amanda (she/her) 22:50, 25 February 2022 (UTC)
The diffs can be compared with those provided in the previous SPI. The newly found user has similar editing patterns, including replacing w:zh:Template:Sinaweibo with w:zh:Template:Weibo, reorganizing of external links, and the removal of dianying.com links. Luciferian𖤐 01:06, 26 February 2022 (UTC)

 Confirmed Keyboardlearner & 暖貼賣不完, Likely Likely to the previous results. -- Amanda (she/her) 01:39, 26 February 2022 (UTC)

LTA:Royalfanta@zh.wikipedia

Unlikely Unlikely the first two users are Royalfanta based on geolocation. That said, they may be related to the Hakubye account. It is a busy range so be careful in making this determination. There are other accounts here, but i'm hesitant to mention false positives. -- Amanda (she/her) 23:08, 25 February 2022 (UTC)

@AmandaNP: thanks for helping in the check. Just for your reference and record, after behavioral investigations, we can confirm (by behavior evidences) that the first two accounts are sockpuppets of Milanharber, the ducked main account of the mentioned Hakubye account. --Luciferian𖤐 02:34, 26 February 2022 (UTC)

Username@zh.wikipedia

Actioned. I have locked Animal-Jumping-2 as a sockpuppet of both a multitude of locked accounts, and of the oversighted account mentioned in the private ticket (which I can't mention here). I decided to post the result here for community review and not to give private CU results. If any clarification is required, I can try to clarify it here. -- Amanda (she/her) 01:45, 27 February 2022 (UTC)

 Confirmed I have reviewed all the information regarding this action and independently arrived at the same conclusion as AmandaNP. Operator873 connect 01:48, 27 February 2022 (UTC)

Thanks for your service and has notified to involved admin. SCP-2000 03:26, 27 February 2022 (UTC)

LTA:114.27@zh.wikipedia

Of course, the accounts are all related.  No comment to the IP address(es) and their relation to this LTA. -- Amanda (she/her) 21:22, 27 February 2022 (UTC)