Steward requests/Checkuser/2024-05

Add links
From Meta, a Wikimedia project coordination wiki


Requests

Sofia@az.wikipedia

Status:    Withdrawn
List of users
Sura Shukurlu (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Atakhanli (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Sofia (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): Atakhanli and Sura Shukurlu:

1) Votes and general opinions in admin voting are the same. Even both are distinguished by their strict stance.

2) Atakhanli here tells the user not to edit the article, and Sura Shukurlu joins the discussion and adds that "others should not be hindered".

3) Atakhanli edits at 02:52 AM, then the editing stops. Sura Shukurlu replies to the user here (02:55). And after a few minutes, Atakhanli continues editing (03:05). And Sura Shukurlu completely ceases its activity, and Atakhanli continues.

4) They take the same position in other discussions.

Atakhanli and Sofia

Same position in discussion and same style of writing.

Ümid edirəm ki, istifadəçilər inciməz. Bu məsələ çoxdan məni narahat edir və aydınlıq gətirilməyini istərdim. Hər birinin fəaliyyətinə ayrılıqda hörmətim var. Zəhmət olmasa başqa yerə yozulmasın.--Turkmen talk 08:43, 1 May 2024 (UTC)
Someone look at this request, please. Users may be disturbed to see this request. Turkmen talk 13:57, 2 May 2024 (UTC)
I talked to all three users and I am sure that there is no such thing. I withdraw the request.--Turkmen talk 16:20, 2 May 2024 (UTC)

기난0725@ko.wiktionary

Status:    Done
List of users
기난0725 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Won1017 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Won2010 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
  • CU log
  • Discussion: No active community
Reason(s): Won1017 was blocked due to the malicious sockpuppet usage, and moved to kowiktionary and kowikiquote. After that, Won1017 is making many sock accounts at ko.wikipedia, and same vandalism pattern is now detected at kowiktionary. We should verify whether this vandalism account is made by Won1017. If so, we will request Global Lock of Won1017. LR0725 ( Talk / Contribs ) 20:15, 2 May 2024 (UTC)
Doing... EPIC (talk) 20:18, 2 May 2024 (UTC)
Done @LR0725: the following accounts are  Confirmed:
None of these are locked but I note that these accounts came from an IP which was globally blocked earlier today.
However, 기난0725 is Unlikely Unlikely to all of the above accounts, so the suspicions around that one can probably be released.
That said, I don't think a global lock is necessary for now. I wrote with Sotiale a few days ago when Won1017 came up at SRG, and they have been given a final warning. No new socks have been coming up since then as far as I can see, at least not from the same IP on kowiktionary, so I think a global lock can wait for now. EPIC (talk) 20:34, 2 May 2024 (UTC)
Ok, I see. Thanks for your quick handling. LR0725 ( Talk / Contribs ) 20:38, 2 May 2024 (UTC)

Colosseum~nowiki@no.wikipedia

Status:    Not done
List of users
Colosseum~nowiki (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
79.161.1.222 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2A01:799:12D8:E600:2578:1328:6A08:5177 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): I suspect the top user is engaging in sockpuppetry by using unregistered accounts, in order to votestack an RFD discussion on nowp. The top user account has engaged with the third one on no:Wikipedia:Sletting/Fæsterålen, and is referencing a different discussion, no:Wikipedia:Sletting/Huinndagan, even though that same IP wasn't involved. Via the IP Info feature I also noticed that the two IPs shared the same location and ISP, and that location also matches up fairly well to where Colosseum himself (vaguely) says he's from. I'd like a check to be performed so I can be sure.. Telaneo (User talk page) 16:04, 5 May 2024 (UTC)
Hi (or hej), this is not actionable for now because in accordance with the ANPDP we cannot publicly link an account to an IP address. We can perform a check if you have any accounts suspected to be related, but we cannot use the IP addresses as a starting point - you need to provide one or more accounts to compare with, otherwise it would be "fishing". EPIC (talk) 19:47, 5 May 2024 (UTC)
Colosseum hasn't made any edits from other accounts as far as I can tell, only from IPs as far as I can tell. If you're unable to link accounts to IP adresses, then I'll leave it as is. Telaneo (User talk page) 19:53, 5 May 2024 (UTC)

ArdaSetiawan@id.wikipedia

Status:    Not done
List of users
ArdaSetiawan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
AnggaAle (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Musuhnya Ariandi Lie (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2001:448A:3047:8DE2:8D0D:1FC4:CA4A:5595 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2001:448A:1021:28B1:6C98:E0C:CF23:ECED (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2001:448A:3044:8B50:70CF:52D5:3D0C:662F (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2001:448a::/32 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): This user always proposes revoking sysops status carelessly and without strong evidence. For example [1] and [2]. And also this user is indicated as LTA on idwiki [3]. I am suspicious of the user ArdaSetiawan because he uses the same IP address as AnggaAle on this page [4].

Oh yeah, I am submitting an investigation here because the CU on idwiki are rarely active. If there is anything wrong please remind me. Regards. Fazily (talk) 05:26, 6 May 2024 (UTC)
For additional information he also stack voted on this page [5] Fazily (talk) 05:49, 6 May 2024 (UTC)
Not done, @Fazily: idwiki has local checkusers, submit a request for CheckUser here instead. EPIC (talk) 05:54, 6 May 2024 (UTC)
@EPIC I'm sorry I disagree with your rejection because most Indonesian Wikipedia examiners are rarely active which results in many investigative cases not being investigated. Please reconsider your decision Badak Jawa (talk) 06:02, 6 May 2024 (UTC)
@EPIC Why did you reject our request from Wikipedia Indonesia? Even though there used to be a steward who accepted requests from the Chinese Wikipedia Badak Jawa (talk) 06:12, 6 May 2024 (UTC)
I'm quoting the stewards page:

The use of steward rights is restricted by policy; stewards will not use their technical access when there are local users who can use that access, except in emergencies.

The same applies here. As idwiki has local checkusers (in other words, local users who can perform checks), we cannot perform checks there, except in emergencies or if they are the local checkusers are inactive to the point where they have not responded despite notices on their talk page.
Therefore, please submit a local CheckUser request to begin with, as they have their own checkuser team. EPIC (talk) 06:15, 6 May 2024 (UTC)
@Badak Jawa: Please don't spam here. Stewards cannot grant themselves CU flag on projects in which there are already local CU (except in cases of emergencies). On zhwiki there is no CU so we can intervene! Furthermore, it is not possible to associate users with public IPs per CU and ANPDP policy, so please - as already said - try to reach local CU who are also admins and can better handle this. This request is declined and it's not a place for discussions! --Superpes15 (talk) 06:19, 6 May 2024 (UTC)

Mr.Destiny Honkai@zh.wikipedia

Status:    Done
List of users
Shiroko Serika (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Auto Redirect Manger (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Mr.Destiny Honkai (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Quite a drama up in the above discussion (I digressed). A sleeper (Shiroko Serika) of Mr.Destiny Honkai surfaced with similar editing behavior of creating disruptive redirects, and I just realized there were no prior checks done on this account. A sleeper check is requested as well to find further accounts. Thanks in advance. （☎） 09:11, 6 May 2024 (UTC)
  •  Confirmed The Mitama Kings, Auto Redirect Manger, Mr.Destiny Honkai, The Police Manger, EditInformation Visit, Indefinitely Rip, Shaiwshaiw
  • Possible Possible Shiroko Serika

The data is Possible Possible, but I have a very strong gut feeling. They are likely to be the same user if their editing patterns are the same. --Sotiale (talk) 12:31, 6 May 2024 (UTC)

  •  Confirmed Beat42beat, TransportSir, Jennis09

What a toxic range.. This is another friend. --Sotiale (talk) 12:31, 6 May 2024 (UTC)

JunzuoL@zh.wikipedia

Status:    Done
List of users
JKQA212 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
AliceYYin (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): A messy one for sure. The original request contains a lot of fishing, in my opinion, except for the two accounts listed here. Based on zh:Special:diff/82536878 and zh:Special:diff/82537868 where the sentence seems to cut off at the middle and the second part is completed by another user, it seems like a blatant duck to me despite the two accounts have refuted such a thought in the discussion. Still, thanks in advance. （☎） 23:25, 6 May 2024 (UTC)
  • Unrelated Unrelated technically

Some of the accounts above appear to have used VPNs, but this is unlikely to make a difference to the results. --Sotiale (talk) 01:35, 7 May 2024 (UTC)

Ignatius N. R.@zh.wikipedia

Status:    Done
List of users
Ignatius N. R. (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Haohao98 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Compare with previous check: creating unsourced stub articles like previous account in similar editing areas. Account created soon after previous sock and main accounts are blocked. Check is requested and endorsed by sysop to verify the sock claim. LuciferianThomas 16:09, 9 May 2024 (UTC)
  • Likely Likely Haohao98

From a technical point of view. --Sotiale (talk) 01:06, 10 May 2024 (UTC)

CharlesCourb@co.wiktionary

Status:    Done
List of users
CharlesCourb (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
HaroldCoubs (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Likely spambots all registered as part of a big group. See new user log on this project. Seawolf35 (talk) 23:54, 9 May 2024 (UTC)

It seems like automated account creation. --Sotiale (talk) 01:20, 10 May 2024 (UTC)

Mafalda4144@zh.wikipedia

Status:    Done
List of users
Mafalda4144 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Tofugamay (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Compare with previous check: T is found to have extremely high overlap in editing areas and language patterns with M, and is now suspected to be a sock of M. A check is requested to verify this sock claim. LuciferianThomas 16:05, 9 May 2024 (UTC)
Additional note: T's account was created within 12 hours of the local publishing of the SPI sock confirm result of M. LuciferianThomas 16:10, 9 May 2024 (UTC)
  • Likely Likely Mafalda4144 and Tofugamay

If the behavioral patterns are the same, technical evidence will clearly prove that they are the same user. --Sotiale (talk) 02:44, 10 May 2024 (UTC)

Retrieved from "https://meta.wikimedia.org/w/index.php?title=Steward_requests/Checkuser/2024-05&oldid=26750312"