Wikipedia:Requests for checkuser

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search

Checkuser is the process of checking information about two or more users (including named users and IPs). Special users are able to check if two or more accounts have been used from the same computer. These users also see User agents. This can help them decide if two accounts are related in the way described above. It is also possible to see if a user is editing from an open proxy.

On this page, users can request some users or IPs to be checked. Good reasons should be given for why a checkuser is needed; you should provide links which show the questionable edits, etc. Questions should usually be created so that they can be answered by yes or no. Responses will be short in order to comply with Wikipedia privacy policy. Sensitive information (like the IP addresses used by an account) are usually not reported. The results are not always clear, and a decision should not be made only on the basis of checkuser results.

Use of the tool[change source]

This tool is to be used to fight vandalism, to check for sockpuppet abuse, and to limit disruption of the project. It must be used only to prevent damage to the project.

The tool should not be used for political control; to apply pressure on editors; or as a threat against another editor in a content dispute. There must be a valid reason to check a user. Note that alternative accounts are not forbidden, so long as they are not used in violation of the policies (for example, to vote more than once or to make it look like more people support an idea). Checkusers will refuse a request, if the reason for checking is not good enough to warrant the use of the tool.

Please see the CheckUser policy for all the rules related to CheckUser.

User with Checkuser access[change source]

The technical list can be found at Special:ListUsers/checkuser.

Archives[change source]

Current requests[change source]

Please add requests to the top of the list.


Sockpuppets[change source]

I am sorry to say so, but per Checkuser policy we are not allowed to relate IP addresses and usernames.--Eptalon (talk) 23:39, 8 February 2020 (UTC)

Possible block evasion / lock evasion[change source]

Same ISP, same user agent; I cannot say anything about where the IPv6 addresses geolocate to, as I do not get this info. While it's certainly possible that one is a puppet of the other, I'd therefore treat them as separate editors, for now. --Eptalon (talk) 08:32, 3 February 2020 (UTC)
@Eptalon: I will say this is pretty close to them as the same person as same ISP + UA. It can surely different people editing using same computerk, anyway, they will be Meat puppets. I have some more likely ones, can you kindly check please. Thanks. Newly created accounts and this 2nd account created their talk pages.
Marooo8083333 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · SUL · CA · checkuser (log))
Alishaol (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · SUL · CA · checkuser (log))

--Camouflaged Mirage (talk) 09:17, 3 February 2020 (UTC)

First one is already blocked, second one has no edits in this Wiki...--Eptalon (talk) 10:29, 3 February 2020 (UTC)
@Eptalon: I mean are the 4 users related? Are the unblocked ones related to the blocked ones, i.e. evading blocks?--Camouflaged Mirage (talk) 11:06, 3 February 2020 (UTC)
No, the last two are neither related to each other (different regions in the world), nor to the first two. --Eptalon (talk) 09:01, 4 February 2020 (UTC)
@Eptalon: I get it, thanks much. :) --Camouflaged Mirage (talk) 09:41, 4 February 2020 (UTC)

Editing on Angelique Rockas[change source]

Although CorrectionX has been blocked, Zaxbronx is probably another sock of the global sock puppet Amfithea, aka SimpleWiki081, and all heavily create/edit the Angelique Rockas article on many other projects. – Aranya (talk) 18:09, 1 February 2020 (UTC)

Hello there, I cannot see any wrong behavior of Zaxbronx. Yes, both geolocate to the UK. This does however not warrant a block of Zaxbronx. Just living close to a criminal (next to a prison), does not make you a criminal, does it? --Eptalon (talk) 19:06, 1 February 2020 (UTC)
I appreciate your explanation, although I wasn't making that assumption. I can't seem to find any good diffs on this project for comparison, so I guess a checkuser is not necessary. Apologies! – Aranya (talk) 00:05, 2 February 2020 (UTC)
I blocked them. Quite clearly the same person based just on behaviour alone. -DJSasso (talk) 13:58, 3 February 2020 (UTC)

Interesting accounts[change source]

 Done. -DJSasso (talk) 14:26, 20 January 2020 (UTC)

Multiple bad changes on Giorno Giovanna[change source]

Would like to see if this user has either used proxies or has any sleeper accounts. Many accounts and were making the same or similar changes. rollingbarrels (talk)

We can't use the CU tool to go fishing. I will look to see if I can see any similarities. But if you have specific ones you want to point out please add some diffs. -DJSasso (talk) 00:32, 13 January 2020 (UTC)

Vandalism only accounts[change source]

Two of them are locked, but they may create more accounts. Zaxxon0 (talk) 20:56, 24 November 2019 (UTC)

 Done. -DJSasso (talk) 12:11, 25 November 2019 (UTC)
@Djsasso: Another, possible meatpuppet but likely sockpuppet, just popped up. rollingbarrels (talk) 01:32, 17 December 2019 (UTC)

Kal-ki-whooping[change source]

Obvious LTA given this. Can we check for other accounts please? -- Amanda (aka DQ) 01:21, 27 October 2019 (UTC)

Non-checkuser comment - account is already globally locked --DannyS712 (talk) 01:33, 27 October 2019 (UTC)
No obvious one that show up that haven't already been caught in the past. They IP hop alot. -DJSasso (talk) 12:41, 28 October 2019 (UTC)

RfD possible socks[change source]

It seems to be likely that these two accounts are the same user, considering the latter was apparently created specifically to !vote in Wikipedia:Requests for deletion/Requests/2019/Chedi Amir, which is heavily involved in. Vermont (talk) 10:37, 13 October 2019 (UTC)

Pretty sure the account was renamed and those are the same account literally. -DJSasso (talk) 12:20, 28 October 2019 (UTC)
No, the top one is now Shoushou90. Vermont (talk) 12:30, 28 October 2019 (UTC)
Right...knew it was a name with a 9 in it.. -DJSasso (talk) 12:36, 28 October 2019 (UTC)
Blocked as a match. -DJSasso (talk) 12:38, 28 October 2019 (UTC)

Vandals[change source]

All accounts vandalizing African Americans. If confirmed, please block the underlying IP's. Zaxxon0 (talk) 04:34, 8 September 2019 (UTC)

They're all crosswiki LTA's. Vermont (talk) 12:14, 8 September 2019 (UTC)
All locked already so nothing to do here. -DJSasso (talk) 11:48, 9 September 2019 (UTC)

Single purpose accounts posting on RfD for GRUH Finance[change source]

These two accounts appear related to me as one of them (MilesML05) has only commented on the GRUH Finance RfD and edited that page, and the other account's main focus has also been this article and the RfD. They both voted "keep" on the RfD. Reception123 (talk) 11:39, 20 August 2019 (UTC)

Not sure there is evidence for CU, but worth watching. Closing admins on RfD do take into account users that have only minimal edit histories.--Peterdownunder (talk) 11:54, 20 August 2019 (UTC)
Okay, will continue keeping an eye on them, though if admins don't take them into account that is fine. Reception123 (talk) 11:55, 20 August 2019 (UTC)
@Peterdownunder: Just FYI would like to add that Ronojoy675 has also appeared making the same type of edits and again voting for "keep". Reception123 (talk) 09:40, 24 August 2019 (UTC)

Single purpose accounts posting on RfD for Decision Stream[change source]

All appear to be single purpose accounts used only to comment on the RfD for Decision Stream or edit the page itself. Behaviour is similar so it appears a CU is warranted. Side Note: Although nothing CU can do, there seems to be some questionable IP activity on that RfD as well. Desertborn (talk) 21:18, 6 August 2019 (UTC)

They are all coming from different IPs in different regions so I can't say they are definitely sockpuppets. However they may be meatpuppets. -DJSasso (talk) 10:24, 7 August 2019 (UTC)

This and the request below should maybe be processed together since it may be one giant paid editing ring. Computer Fizz (talk) 07:00, 7 August 2019 (UTC)

Single purpose accounts[change source]

Single purpose accounts voting to keep on the article Fatih Ürek. Behavior evidence is so similar that it's likely they are socks. Zaxxon0 (talk) 23:47, 27 July 2019 (UTC)

There's more accounts now. Very likely either sockpuppets or meatpuppets. Regardless of which, it's evident their only purpose here is to !vote in that RfD. If it turns out they aren't related by IP, I'd be in favor of blocking them anyways as SPA's and meat/sockpuppets. Thanks, Vermont (talk) 13:59, 28 July 2019 (UTC)
Can't comment on the IP, sorry. If the other show similar behaviour, do we need a CU to make sure? (aka. Duck test..)?--Eptalon (talk) 14:25, 28 July 2019 (UTC)

Џамбас-Рх[change source]

Апостоли-13 said that he wrote the article Rasim Bajrović, but the article was started by Џамбас-Рх. They both have a similar interest in that person. Nigos (talk · contribs) 09:45, 27 July 2019 (UTC)

Both accounts are now locked; no action is necessary. Thanks, Vermont (talk) 13:53, 27 July 2019 (UTC)
Actually, only the second one is presently locked. Working on that. Vermont (talk) 13:57, 27 July 2019 (UTC)

Suspected socks of banned user[change source]

The first account made this edit, which the second account made it here. The master of the first account is a banned editor who also shows interests in this (by third account). Checking to see if they are related, and if there are other socks. -★- PlyrStar93 Message me. 20:04, 13 July 2019 (UTC)

The last two seem unconnected technically despite the edits, the initial one is to the already locked 'Aliboyrock'. -- Lofty abyss 20:17, 13 July 2019 (UTC)
The behavior of these accounts still match up (accounts #1 and #2 are pretty much the same; account #3 matches a bunch of enwiki edits - eg. diff). That said, I'm inclined to believe the person is using a bunch of proxy/VPN to hop around the world because this individual has recently been editing with IP from various different locations. -★- PlyrStar93 Message me. 20:24, 13 July 2019 (UTC)
I ran a checkuser on all three of them, and I have to say that they are located in different time zones (first one: American continent, second/third: Europe). Also, interest for Chess is common, in the world, so we don't have any links to the third account. As to the irst and second: they are in different time zones, and sibce the edits are at different times, we can rule out VPNs or similar. In shot: I don't see a connection...--Eptalon (talk) 21:19, 13 July 2019 (UTC)
I can supply with anon edits at a different wiki showing the same individual hopping IP around different locations. The edits are all made within a short period, and changing IP after one gets reverted. 1, 2,3, made within 5 minutes and locations involve Egypt and Turkey; 1, 2, 3, 4 four countries in three continents within an hour;1, 2, 3, 4 editing same page within two hours, location between four countries in Europe, Asia and Africa and there is no way these edits were made by different people. I would like to see some opinions about how this is possible without proxy or VPN. What to look at from the third account isn't simply chess, the "Lubek" stuff and the link to another enwiki sock's edit is what really needed attention. And I wouldn't call five hours of time difference on a weekend "different time zone" especially when the text added is almost identical. -★- PlyrStar93 Message me. 22:28, 13 July 2019 (UTC)
All three accounts above are currenlly globally locked - so there's nothing we can do. As to the evidence you provide: CU policy doesn't allow me to directly comment on IPs..--Eptalon (talk) 22:42, 13 July 2019 (UTC)
You may not all know this: there is propriety software on the market which hides your real location and uses spare computing power anywhere in the world. If this person or group is using such software they will appear to edit from many places but in reality be in the same room. I apologise for not remembering the name of this software, but I assure you it does exist. Macdonald-ross (talk) 10:35, 7 August 2019 (UTC)
Also the people who allow others to do it get paid in bitcoins right? Or am i thinking of something else. — Preceding unsigned comment added by Computer_Fizz (talkcontribs)

Checkuser request[change source]

Both copy and pasted articles about baseball players from enwiki, there may be more. Zaxxon0 (talk) 03:29, 4 July 2019 (UTC)

@Zaxxon0: Non-CU comment: has this caused a problem? People are allowed to use multiple accounts if they don't use them to cause trouble or evade restrictions. Besides that, it's very possible that friends or classmates (who could be using related IP addresses) have a project that involves working on similar pages. This page is for identifying users who need to be blocked, and you haven't indicated such a need here. --Auntof6 (talk) 04:10, 4 July 2019 (UTC)
They aren't allowed to edit in the same topic areas at the same time (or close to it) with undisclosed accounts though. That being said there is 10 days between edits from the two so I won't be doing a check now. If they do start editing concurrently I will look. -DJSasso (talk) 11:28, 4 July 2019 (UTC)

Thita Rangsitpol Manitkul[change source]

The article Thita Rangsitpol Manitkul is known for a global sock puppetry with many global locks, see for example here or here. All three accounts and some IPs were active in Wikipedia:Requests for deletion/Requests/2019/Thita Rangsitpol Manitkul. Greetings from Germany, --Snookerado (talk) 17:12, 30 June 2019 (UTC)

  • If these are sockpuppets, the RfD's result should probably be reconsidered. Vermont (talk) 11:04, 1 July 2019 (UTC)

Vandal?[change source]

usernames are similar and they made bad edits. They also act similarly. Nigos (talk · contribs) 01:27, 27 June 2019 (UTC)

  • Blocked along with a couple sleepers. -DJSasso (talk) 12:04, 27 June 2019 (UTC)

Livs17898361[change source]

New accounts with similar names were made within 2 mins of each other. Nigos (talk · contribs) 07:15, 26 June 2019 (UTC)

@Nigos: Non-CU comment: These users have made no changes, so even if they are the same person I don't think there would be anything to be done. People are allowed to have multiple accounts under certain circumstances. --Auntof6 (talk) 07:50, 26 June 2019 (UTC)
Correct, if they haven't done anything wrong there is nothing to do here yet. -DJSasso (talk) 10:55, 26 June 2019 (UTC)

Џамбас-Рх[change source]

Апостоли-13 said that he wrote the article Rasim Bajrović, but the article was started by Џамбас-Рх. They both have a similar interest in that person. Nigos (talk · contribs) 09:45, 27 July 2019 (UTC)

Both are globally locked, no checkuser necessary....--Eptalon (talk) 15:28, 27 July 2019 (UTC)