(Translated by https://www.hiragana.jp/)
Steward requests/Checkuser/2010-10 - Meta Jump to content

Steward requests/Checkuser/2010-10

From Meta, a Wikimedia project coordination wiki

Requests

Deva@el.wikipedia

 Confirmed Same IP addresses used on all three accounts, two different user-agent strings (one quite unique), but common to all three. Kylu 01:39, 18 October 2010 (UTC)

츄석@ko.wikipedia

Comment Comment Request created on the wrong page, reposting here. Original request added to archive, diff. Kylu 17:19, 18 October 2010 (UTC)
please check more user
Comment Comment The first ten accounts substituted '추'(choo) to '츄'(chu) in original words, and its intension is seemed to mentioning ko:사용자:Chugun. Second ten accounts are insulting Chugun by using sexual terms. --Mintz0223 05:30, 19 October 2010 (UTC)
Results

Group 2 and group 3 Likely Likely.

Group 6, group 7 and group 8 Likely Likely, and them and group 5 Possible Possible. Group 4 and group 5 Possible Possible. --Shizhao 13:31, 19 October 2010 (UTC)

Srimalpunchi@si.wikipedia

මීමා 03:06, 15 September 2010 (UTC)

Comment Comment To investigating Steward, I have reason to believe the petitioner themselves a sockpuppet of si:User:බිගුවා, and si:User:එළහරකා. If you demand I'll file a separate case. BTW the above discussion is for exactly to curb the unhelpful edits of this kind editors. Best--Chanaka L (talk) 07:07, 15 September 2010 (UTC)

::Chanaka L, If you want just make a request please. I don't want to be that much stupid. I have an account called mmnanuruddha(not using anymore). Other than that I'm clean. So go head. make a separate case. I can say 100% i'm not the si:User:එළහරකා neither මීමා. Also i'm beliving that will make your mind clean. I like that. -- බිඟුවා සාකච්ඡාව 10:44, 15 September 2010 (UTC)

I'm very sorry Chanaka L, Really sorry. you means බිගුවා & not me. my fault. I'll delete about comment. Yep. I Agee with you. -- බිඟුවා සාකච්ඡාව 10:55, 15 September 2010 (UTC)
Comment Abstain Home project. Kylu 11:49, 15 September 2010 (UTC)
User name7 Jiro Ono and user name8 ඵුස්සදේව have no matches found.  Confirmed the same IPs involving the first 6 users listed above, though they have had variable IPs at different times:
  1. User name1 Srimalpunchi = user name4 චතුනි අලහප්පෙරුම
  2. User name1 Srimalpunchi = user name2 රොමානිස් සැමුවෙල්
  3. User name3 සබර = user name6 දොන් මැනුවෙල් තිවංකා
  4. User name3 සබර = user name5 දසනැබළයෝ
Details are being sent to checkuser-l.Jusjih 23:37, 3 October 2010 (UTC)

Hoyojo@zh.wikipedia

The suspected users are follows:

Reason?--Waihorace 10:12, 25 September 2010 (UTC)
Not done, see bellow. --dferg ☎ talk 13:44, 2 October 2010 (UTC)

Inhins@zh.wikipedia

--CDIP No.150 repair meter 14:17, 22 September 2010 (UTC)

Please also check Sdee (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser), since
  1. Since Ronochen and Inhins started to take part in votings, most of the votings are Sdee's DYK nominations, in all of which voted Support Support. Additionally, in those Sdee's DYK nominations, some of them are faced many Oppose Oppose, or are at the critical-point, or did not match the required number of Support Support before Ronochen and Inhins voted; and then Ronochen and Inhins voted at Sdee's DYK nominations and changed the results.
  2. When Sdee and w:zh:user:Kalon have edit-war in the article w:zh:中央ちゅうおう人民じんみん政府せいふこう澳門まかお特別とくべつ行政ぎょうせいおくおく大熊おおくま, Inhins reverted Kalon's version to Sdee's version.
--长夜无风 16:12, 25 September 2010 (UTC)
Please help checking. User suspected violating voting rules with sock puppet. Thank you very much.--Wing 09:37, 30 September 2010 (UTC)
It doesn't look as if Sdee is related (differing IPs, useragent, etc...), though Inhins and Ronochen certainly are: They use the exact same version strings from the same IP addresses in an overlapping fashion. All three accounts use a certain anonymous proxy in common, but that's not really surprising, considering. Kylu 23:29, 3 October 2010 (UTC)
Thanks a lot, but I just didn't understand something here, "Sdee is not related, but all three use a certain anonymous proxy in common", what does such the situation mean? Are Inhins and Ronochen using only the proxy? How much is Sdee involved in the proxy? --CDIP No.150 repair meter 15:42, 4 October 2010 (UTC)

Πぱいrate@zh.wikipedia

Results

Inconclusive Inconclusive --dferg ☎ talk 15:30, 30 September 2010 (UTC)

cross-project spamming & sock-puppeting (a/cs @ zh.wikipedia)

Geroaff, Moneygiven343464, Moneygiven47278752, Ywtnss22 have global locked--Shizhao 14:33, 2 October 2010 (UTC)
No check needed IMHO.  It looks like a duck to me that they're all sockpuppets. Block on behaviour. Regards, --dferg ☎ talk 13:51, 8 October 2010 (UTC)

A2569875 and B2569875@zhwikipedia

Results

Нана-чян@uk.wikipedia.org

Not done - Sorry, but we are not allowed to use CheckUser on ukwiki under the above explained circumstances. --dferg ☎ talk 14:12, 28 September 2010 (UTC)

Tokopolo1997@zh.wikipedia

Waihorace 12:02, 29 September 2010 (UTC)

________________________________________________
Results:


The following appear to be socks of each other from a technical standpoint. However, I don't read Chinese - hence I can't compare contributions, so you may want to look at them before taking any actions against them.


The following have either not edited zhwiki at all, or have not edited within the past three months, causing the checkuser query to return nothing:

The vandal has used some of his IP addresses to create a large number of accounts created over a long period of time. If the local administrators on zhwiki wish, I can block the IP addresses used for several months. It does not appear that anyone other than the vandal is editing from those addresses, so collateral damage should range from minimal to non-existent. J.delanoygabsadds 23:19, 30 September 2010 (UTC)

User:Shizhao global locked some account global already. --Waihorace 23:06, 1 October 2010 (UTC)

RiskAdverse@ms.wikipedia

Status:    Done

Hi, I am SYSOP from MS Wiki. Request to block IP address for * RiskAdverse (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser). Suspected to be mass vandal as previous attack based on same vandal type. Previous suspected sockpuppet used are ClearingHouse (24 Sep attack), Shah560, Lidl10, Datamonitor, MyExcellency ... a lot more. Yosri 00:37, 30 September 2010 (UTC)

Previous sockpuppet as follow (in no particular order):-

Results listed, would point out that non-IP data was checked against logs, and that data matches my previous results for Jubilee and Datamonitor, and their socks. IP blocked, no collateral damage within its /16. Kylu 01:07, 30 September 2010 (UTC)
Thank you for your assistant. Yosri 11:32, 30 September 2010 (UTC)

කච්චදේව@si.wikipedia

Only the fourth user doesn't have Stale edits. And it is  Confirmed that the user (නන්දිමිතුරු) is sockpuppet of Srimalpunchi. Also, the users රොමානිස් සැමුවෙල් and චතුනි අලහප්පෙරුම are Likely Likely controlled by the same person. --FiliP ██ 09:53, 8 October 2010 (UTC)
Thanks for speedy investigation. I will report this in the local AN. Best--Chanaka L (talk) 11:06, 8 October 2010 (UTC)

Windup@mswiki

Status:    Done

Hi, I am SYSOP from MS Wiki. Request to block IP address for * Windup (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser) (10 Oct 2010) for sockpuppet Vandal. Suspected to be repeated vandal as previous attack based on same vandal type. Previous suspected sockpuppet used are ANJINGKURAP (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser) (4 Oct attack) Yosri 04:46, 10 October 2010 (UTC)

Same subnet, blocked /16, no collateral damage detected. Kylu 02:01, 12 October 2010 (UTC)