Commons:Requests for checkuser

From Wikimedia Commons, the free media repository
Jump to navigation Jump to search

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Artículo bueno.svg Confirmed Likely
Symbol version generic.svg Possilikely Symbol possible vote.svg Possible
Symbol unlikely.svg Unlikely Symbol unsupport vote.svg Inconclusive
Symbol unrelated.svg Unrelated Time2wait.svg Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust. 8ball The CheckUser Magic 8-Ball says
Cyberduck icon.png It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing… Pictogram voting info.svg Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard.
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.
  5. Requests to run a check on yourself will be declined.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser." You will be taken to a page where you can fill out the request. Please make your request there brief and concise.


Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Checkuser requests to be listed‎ (2 P)
Commons:Requests for checkuser/Case/Albert Azcón
Commons:Requests for checkuser/Case/Mark Imanuel Granados

Requests[edit]

Bakay022[edit]

view • edit • history • watch
Filed: 09:11, 27 September 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: Self-promoting xwiki vandal from TR uploading selfies, adding his name to several pages and repeatedly trying to hijack pages. See also logs here and edits on wikidata I just reverted. --Achim55 (talk) 09:11, 27 September 2022 (UTC)Reply[reply]

Mark Imanuel Granados[edit]

view • edit • history • watch
Filed: 23:41, 26 September 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: First account is confirmed at enwiki by myself to previous socks of Mark Imanuel Granados (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log ). Second account was confirmed at enwiki by a different checkuser. Both are evading the 2020 block on Mark Imanuel Granados. Suggest a checkuser here as there was a sleeper account found on enwiki. See w:en:Wikipedia:Sockpuppet investigations/Mark Imanuel Granados. Thanks, Dreamy Jazz talk to me | enwiki 23:41, 26 September 2022 (UTC)Reply[reply]

User:562 526 234 S and User:Aquarius274 are Artículo bueno.svg Confirmed have added User:136.158.82.98 and User:Vatican Catholic all blocked - FitIndia Talk ✉ 06:32, 27 September 2022 (UTC)Reply[reply]

Albert Azcón[edit]

view • edit • history • watch
Filed: 16:51, 25 September 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: CarlosArrimadas was blocked here last year because sockpupping, now Albert Azcón was blocked on eswiki because sockpuppet of the first and is uploading possible copyvios here. Ezarateesteban 16:51, 25 September 2022 (UTC)Reply[reply]

АнИгМа[edit]

view • edit • history • watch
Filed: 16:13, 17 September 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: It started with File:Monument to the soldiers of the Soviet Army - the liberators of Soviet Latvia and Riga from the Nazi invaders (Riga).jpg uploaded by GrIgMaNN, and after 13 minutes АнИгМа replaced it with the slightly modified version. The file itself occurred to be stolen, see Commons:Deletion requests/File:Monument to the soldiers of the Soviet Army - the liberators of Soviet Latvia and Riga from the Nazi invaders (Riga).jpg. Investigating the case, I have found out that GrIgMaNN is contributing since April 24, 2022 starting from ru.wiki, and it happened after АнИгМа was indefinitely banned from ru.wiki on April 3, 2022 for having several sock-puppets. After the aforementioned stolen picture had been deleted, GrIgMaNN uploaded its modified versions again, first locally to ru.wiki and then to Commons as File:Monument to the soldiers of the Soviet Army - the liberators of Soviet Latvia and Riga from the Nazi invaders.jpg; I have blocked them for that on September 8. It is very remarkable that on September 10 АнИгМа requested for unblock on their Talk page although they had not been blocked. Today АнИгМа has uploaded two new images, File:Changing the guards at the Kremlin wall.jpg and File:Eternal flame at the Kremlin wall in Moscow.jpg, and after that both images were added to the article in ru.wiki by GrIgMaNN. It is also worth mentioning that these two usernames are very similar keeping in mind that АнИгМа is AnIgMa written in cyrillics: both AnIgMa and GrIgMaNN contain IgMa element, and the very pattern of alternating lower and upper case letters is quite typical. However, here GrIgMaNN mentions АнИгМа as another person deceiving other users, and then we have this claim. Andrei Romanenko (talk) 16:13, 17 September 2022 (UTC)Reply[reply]

Artículo bueno.svg Confirmed User:АнИгМа to User:GrIgMaNN and added User:Tetradont. - FitIndia Talk ✉ 18:30, 17 September 2022 (UTC)Reply[reply]

Adhithya Kiran Chekavar[edit]

view • edit • history • watch
Filed: 12:04, 13 September 2022

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason:

  • 12Polistermodam01: Pv67 and Ninetyeightpointone were globally blocked in August 2021, 12Polistermodam01 was created in December 2021.
  1. [1][2]
  2. [3][4]
  3. [5][6]

12Polistermodam01 exactly after 10 edits and 4 days (auto-confirmed), the user reverted an edit at a semi-protected file to uncrop image to include the Thiyya in caption (Please note that Thiyya caste promotion is what these socks are doing across wikis).

  • Kanbolan: Created two days before 12Polistermodam01.
  1. [7][8]
  2. [9][10]
  • Tony8908: .
  1. Othayoth shankaran v. Tony8908 [11][12] (please note the "Thiyyar Regiment" tag, it's relevant in the next case)
  2. Vvian980 v. Tony8908 [13][14] - [15] (Ezhava toddy drawers, same source - archive.org)
  • Tirurtigers: Possible meatpuppet from the same PR group.
  1. Ivirodov v. Tirurtigers [16]-[17][18] (Thiyyar Regiment)
  • Shithor89560, Shithor, Sagar123lmao: Uploading male and female Thiyyar pictures from same source www.deutschefotothek.de and adds same tags. Shithor is an earlier account for the same purpose.
  1. [19][20][21]

Also, do you think Tony8908 and Shithor89560 and Vvian980 has similar username structure?--2409:4073:4D89:106B:75FC:1806:DEE5:D47D 12:04, 13 September 2022 (UTC)Reply[reply]




Strainsburg[edit]

view • edit • history • watch
Filed: 12:31, 12 September 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: Both users are uploading low-res screenshots and/or web downloads of Argentine footballers. In the last 24 hours, the suspected sock has uploaded File:GabrielHauchedeRacingClub.jpg and File:Gabriel Hauche, de Racing Club.jpg, while the suspected master has uploaded File:GabrielHaucheRacingClub.jpg, all of the same footballer, showing similar behavior with categories. Adeletron 3030 (talk) 12:31, 12 September 2022 (UTC)Reply[reply]

Artículo bueno.svg Confirmed --Krd 07:55, 17 September 2022 (UTC)Reply[reply]

Yuiyui2001[edit]

Yuiyui2001 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )

Suspected related users[edit]

User: ToyotaGR2022 (talk · contributions · Move log · block log · uploads · Abuse filter log) 

Rationale, discussion and results[edit]

  • Reason: Same as used before but short-lived, but modifying maps from colors from the maps of provinces of the Philippines, and it could one of the names that suspect the user Yuiyui2001 after inactivity of three months respectively. Maanshen (talk) 12:13, 12 September 2022 (UTC)Reply[reply]

SagoShader[edit]

view • edit • history • watch
Filed: 03:08, 7 September 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: If you look at the files uploaded by Strmare and SagoShader, you will see that they have both uploaded many "flags" created as hoaxes. A few examples of these hoax flags are: [22] [23] and a whole deletion nomination page for files uploaded by Strmare can be seen at [24]. 112.206.96.117's only purpose was to try and reverse the nomination of the files of Strmare [25], with Han Mi Nyeo doing the same [26]. Plus, both SagoShader and Strmare have created "logos" for themselves [27] [28], and they both look very similar, which implies that they might be the same person. Flagvisioner (talk) (contribs) Flag of Sonora.svg Flag of Arizona.svg 03:08, 7 September 2022 (UTC)Reply[reply]

  • This is a difficult case. Strmare and SagoShader each have many, many devices and countries (and even multiple disparate--separated by thousands of kilometers--locations within the same country). Users with so many devices and locations are rare; that two genuinely different users would have such a data footprint and share the subject matter interest is so unlikely as to suggest a connection. This footprint, further, is often indicative of seeking to evade CU detection and thus that an LTA is involved. Verily, these users fit the profile of Szm020730 well enough that I would call it Likely that SagoShader = Strmare and Symbol version generic.svg Possilikely/ Likely that they are Szm020730. (My only hesitation is that this would be the first time the LTA has truly broken out of their historical naming pattern.) Han Mi Nyeo has less editing history and thus hasn't shot the moon like the others, but they are Artículo bueno.svg Confirmed to be 2022 tatsu and, on behaviour alone, it is difficult to imagine they are unrelated. No comment on the IP. Эlcobbola talk 19:16, 8 September 2022 (UTC)Reply[reply]
    • Can I please put my two cents in this request here? I have a strong suspicion that all these accounts are actually linked to user:Sekgs Delwa who in turn has been blocked as being a suspected sockpuppet of user:Jurisdrew. My initial evidence comes from this Talk Page where user:Han Mi Nyeo has repeatedly posted the exact same comment that User:Sekgs Delwa did back in April and in the exact same editing manner, which is rather peculiar. I have noticed that Strmare and his obvious sockpuppet Han Mi Nyeo, have uploaded many files of fake flags, with a particular interest in Turkic people, and symbols mostly of Japanese (and other Asian) cities, and they like to edit galleries of flags, such as Cultural flags, City flags, etc - similarly to what Sekgs Delwa and other sockpuppets of Jurisdrew, have done before [29], [30]. They also have the tendency to make repeated revert edits on the same page and they also tend to remove the deletion request tags from their files - that's the reason why Han Mi Nyeo has been currently been blocked from editing for one week. I think it's worth it investigating them as possible sockpuppets of user:Jurisdrew instead of user:Szm020730. Thanks --Argean (talk) 18:28, 13 September 2022 (UTC)Reply[reply]

Minefa4760[edit]

view • edit • history • watch
Filed: 18:49, 15 August 2022 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: These users are clearly socks of each other, spamming links to the same website today. I think it's likely that there are other accounts which will be turned up by a checkuser. Marbletan (talk) 18:49, 15 August 2022 (UTC)Reply[reply]

Added Fuydahalma, Ramas396492281, Kepsenakni, Ramas39649, Uotopo, Artinonano, Yhhzaxefxz, Vzsfqojypseyott, Jeryhoco, Cikiba7978, Tifyanerza, Sacog22033, Listitardi, Zerderamli and Vatim84949 all blocked.- FitIndia Talk ✉ 05:18, 16 August 2022 (UTC)Reply[reply]
Thank you. I have now reverted all the spam added by each of these accounts. Marbletan (talk) 12:34, 16 August 2022 (UTC)Reply[reply]

@Fitindia: : Two new users which are obviously related to the above appeared today. Same behavior as before: at the same file pages that the previous socks edited, they are spamming external links using Turkish language descriptions. Can you (or another checkuser) have a look? Thank you. Marbletan (talk) 12:06, 19 August 2022 (UTC)Reply[reply]

Added users Lkdkvdnrf9, Jd73jw6w40, Dnsz497axj, Karikirzo Nupsecustu, Tehoziha, Rviyrpqgvt, Pignagerdi Gylefo and Kecal33277 are now blocked - FitIndia Talk ✉ 14:33, 19 August 2022 (UTC)Reply[reply]
+ New users spamming links to the same website/s. Regards Kirilloparma (talk) 17:30, 21 August 2022 (UTC)Reply[reply]
Here's two more. Marbletan (talk) 12:09, 22 August 2022 (UTC)Reply[reply]
Added users Kuterato, Uqesf46, Hodid97562, Lkdpygjh1q, Uotopo46, Tehoziha46, Hatuceb.fofapel, Seticemisah, Minefa47601 and Myer.khadyn are now blocked - FitIndia Talk ✉ 13:12, 22 August 2022 (UTC)Reply[reply]
One more for today. Marbletan (talk) 11:34, 23 August 2022 (UTC)Reply[reply]
Four more from Aug 26. Marbletan (talk) 12:26, 29 August 2022 (UTC)Reply[reply]
Two from Aug 29. Marbletan (talk) 18:55, 29 August 2022 (UTC)Reply[reply]
One from Sep 1. Marbletan (talk) 14:14, 1 September 2022 (UTC)Reply[reply]
@Fitindia: More obvious socks have been identified in the last week or so. Could you have a look for others I may have missed? Thank you. Marbletan (talk) 14:14, 1 September 2022 (UTC)Reply[reply]
Blocked above and added Terricarroll16, Kaanistamo, Lestatalto - FitIndia Talk ✉ 16:39, 1 September 2022 (UTC)Reply[reply]
Another one found today. Marbletan (talk) 12:37, 2 September 2022 (UTC)Reply[reply]
Three more from Sep 5. Marbletan (talk) 12:52, 6 September 2022 (UTC)Reply[reply]
Added and Blocked Requvo.ugobus, Kuliteravoy, Gajoted.cocijav, Hecatylo - FitIndia Talk ✉ 16:07, 9 September 2022 (UTC)Reply[reply]
For older requests, please see Commons:Requests for checkuser/Archives
Retrieved from "https://commons.wikimedia.org/w/index.php?title=Commons:Requests_for_checkuser&oldid=692258503"