Steward requests/Checkuser/2011-05

Latest comment: 13 years ago by Dferg in topic Requests

Requests

    •   Done Logging out to harass users is against policy on every wiki of which I am aware. Unfortunately, that seems to be the case here as Geologist is   Confirmed to have used that IP (among others) and no other user seems to have used those IPs. -- Avi 00:14, 2 May 2011 (UTC)
The following accounts are   Stale:
100범
판델라
Shommenshib
Qoinqder
Kbr0706
The following account is   Unrelated:
Komitsuki
The following accounts are   Confirmed to belong to the same user:
Ankerlpka
Pandira
Bomppy
Doaintaorek
Roadck
Doorks
Solvven
Koyron
Esqual
Nogt
Docks
Erdram
Dodogardi
Undkiskete
Brikus
Kokoah
Sponck
Koikoiroi
Sokjong
Jpngk33
Danqaster
I am not sure about Leno. This account may be of may not be associated with those above. The result is   Inconclusive.
Ruslik 14:31, 3 May 2011 (UTC)
  Confirmed: EL983, EL9832, EL9834.   Likely: EL9833--Shizhao 03:15, 4 May 2011 (UTC)

여성부의눈@kr.wikipedia

14.63.240.81 and 210.101.131.232 is open proxy, have global blocked--Shizhao 03:28, 4 May 2011 (UTC)
  Inconclusive: 여성부의눈(There is no user by the name).   Confirmed: 국군찬양, 토론계의 거성, 여성부의 눈, 대한민국 군대는 영원하다, 14.63.240.81 and 210.101.131.232--Shizhao 03:39, 4 May 2011 (UTC)


--복지 06:31, 4 May 2011 (UTC)

Any reason for the check? Ruslik 09:01, 4 May 2011 (UTC)
Checking found the reason: Raisekept and Raisekept1 were blocked for 6 months on January 30, extended to indefinite on January 31, then 38142239twd appeared on February 1, which would thus be a rather blatant block evasion if it were the same person. Nevertheless   Declined because the Raisekept accounts had their last edits in late January, which is more than 3 months ago, so they are   Stale (cannot be checked any more). - Andre Engels 14:51, 4 May 2011 (UTC)
  Unlikely Ruslik 18:48, 6 May 2011 (UTC)
  Unnecessary -   It looks like a duck to me. PeterSymonds (talk) 22:31, 6 May 2011 (UTC)

여성부의눈@ko.wikipedia 2

ko:user:쀆범 [8], ko:user:이결 [9], [10], [11], [12] Probable block evasion; please see contributions. He has also inserted copyright violations and vandalized some articles. -- Dootak 02:25, 7 May 2011 (UTC)

쀆범 is   Unrelated.
All others are   Confirmed. Ruslik 06:47, 7 May 2011 (UTC)

Mister Ediçã[email protected]

  Declined because we can not make direct associations between accounts and IP addresses. -- Dferg ☎ talk 12:37, 10 May 2011 (UTC)

Cenfany @zh.wikipedia

Belovekk is   Unrelated
All others are   Confirmed
I also found other socks of the this user:
Chunfaye, Qantas, TammyAu, Vanessa1999, Himhim123, Kelly456, Aprilip123, 天下文章一大抄
Ruslik 18:50, 12 May 2011 (UTC)
Thank you, and could you confirm that there is no open proxy using since there are some good-faith editors in the list?--Mys_721tx(talk) 10:39, 13 May 2011 (UTC)
Which of them are good faith? Ruslik 08:28, 14 May 2011 (UTC)
zh:User:天下文章一大抄 is obviously a good-faith editor. Why would such a user with around 2000 edits, who never edit Hong Kong related article, make vandalism in these pages about Hong Kong TV?--Jsjsjs1111 09:58, 14 May 2011 (UTC)
This user edited from an IP from Hong Kong. The same IP was used by Cenfany, Vanessa1999 and Kelly456. Nobody else has edited from this IP (not counting edits made by the IP itself). UAs were also exactly the same (including unregistered use). It does not also appear to be an open proxy. Ruslik 12:51, 14 May 2011 (UTC)
Thank you, :-) though the result really surprised me.-Mys_721tx(talk) 05:47, 15 May 2011 (UTC)
  Confirmed, you won't be surprised to hear; but the IP ranges are too big to block. Sorry! PeterSymonds (talk) 17:42, 14 May 2011 (UTC)

Please inclued:

* Torta de morango
* Tio Chumbinho
* Usuário do Mac
* Xptovs25

Thanks.--187.71.6.71 21:47, 11 May 2011 (UTC)

I endorse this request. The abuse from this accounts and possibly from IP ranges lasts more than a month. Would be helpful to slow down the vandalisms if you provide an IP range we could block. I have reasons to believe this person also uses IP to vandalize (ranges 201.76.114.* and 201.76.115.*). As can be seen here, here, here and here (there are more in fact), those ranges vandalized the same articles than those accounts. Concerning one of his socks name, this user is probably an old account (stale) blocked for sockpuppetry.
Previous checks here:
Steward requests/Checkuser/2011-04#Oceano_Atl.C3.A2ntico.40pt.wikipedia
Steward requests/Checkuser/2011-04#Tio_Chiquinho.40pt.wikipedia
Thanks.” Teles (Talk @ C G) 22:14, 11 May 2011 (UTC)

Other socks:

  • 201.76.114.112
  • Litrix Linuxer
  • Aquarista brasileiro
  • Cientista da computação
  • Pastor Jorge
  • Jack London Forever
  • 200.215.222.195
  • O retorno de Litrix Linuxer

Thanks. The preceding unsigned comment was added by 187.71.59.62 (talk • contribs) 23:05, 11 May 2011 (UTC).

The following accounts are   Confirmed:

  • Torta de morango
  • Tio Chumbinho
  • Usuário do Mac
  • Xptovs25
  • O retorno de Litrix Linuxer
  • Leandrinho777
  • Tio Chiquinho
  • Master Roshi
  • Bomba-relógio
  • Biólogo Amador
  • Porra o Ornitorrinco
  • Soli Deo Gloria do Yahoo
  • Laslopedia

Contact me privately about the IP rangeblock. Jafeluv 01:07, 12 May 2011 (UTC)

Please acresent Tsufuru-jin.--201.6.212.215 14:46, 16 May 2011 (UTC)

  Declined since we cannot link IPs to accounts. PeterSymonds (talk) 21:26, 18 May 2011 (UTC)

187.40.82.160

111.249.22.150,Mge01,Goodjack,Davidshi26,Sharon-0416,Benson82513,D48112002,114.36.176.151 @zh.wikipedia

The requesting user is blocked indefinitelly in kowiki [13]. Before processing this request, I'd like to have a clarification on that block. -- Dferg ☎ talk 10:57, 16 May 2011 (UTC)
 

Rejected since no clarification has been provided. If an admin or two supports this request, we will consider carrying it out. -- Dferg ☎ talk 10:38, 21 May 2011 (UTC)

Idh0854 was just reverting the other user, right? -- Mentifisto 00:31, 19 May 2011 (UTC)
  Unrelated in term of IPs. Just two users reverting each other. Local administrators should step in to stop the edit war.--Jusjih 08:49, 19 May 2011 (UTC)
The following accounts are the same user:
  1. pt:user:Tobidias.
  2. pt:user:Observadordocarnaval.
  3. pt:user:FCPernambuco.
  4. pt:user:Arquivolowiki
  5. pt:user:Jalegre
  6. pt:user:Tupanzinho
  7. pt:user:Mirim-mirim
  8. pt:user:ColorinChapolado
  9. pt:user:Jcarlos1973
  10. pt:user:LuZuZ
  11. pt:user:Dollydias
  12. pt:user:PolegarVermelho
Matanya 08:34, 8 May 2011 (UTC)
That makes a lot sense. If possible, please watch my doubt above about requiring help from other project. Thank you so much for your quick answer.” Teles (Talk @ C G) 09:20, 8 May 2011 (UTC)


ElectroStatic [email protected]

The following request is closed: not done. Please do not modify it. No further edits should be made to this discussion.

Desculpe-me mas eu não entendi qual o motivo pela qua achas que esses usuários são sock puppet um dos outros. Poderia explicar? De preferência com diffs que comprovem as tuas suposições. Obrigada. Béria Lima msg 12:28, 14 May 2011 (UTC)

Nem precisa.É só ver as contribs e comprovar.Veja que eles foram bloqueados pelo mesmo motivo.Tudo bem,vou colocar diffs: Capitão Feiticeiro
Aí fala tudo a respeito dos socks.--201.6.212.215 13:27, 14 May 2011 (UTC)
Uma dica para ti: Os stewards não vão "ir procurar evidencias nas contribuições" porque esse é o trabalho de quem faz o pedido. E o pedido anterior prova a relação entre as 3 primeiras contas, que as outras contas que ver com as primeiras. Béria Lima msg 13:30, 14 May 2011 (UTC)

Nelas tem o último registro de bloqueio.Ah,e eu pedi para voce olhar para ter a resposta a sua pergunta.--201.6.212.215 13:36, 14 May 2011 (UTC)

Pois continuo sem resposta. Que as outras contas tem que ver com as contas bloqueadas? Béria Lima msg 13:38, 14 May 2011 (UTC)
Interessante que,o IP foi bloqueado nos mesmos dias que o Electro comecou a sockear.No check do Feiticeiro,os gringos debateram sobre o Jolt e o Samurai.O AutoVolt vi nas contribs.Um cara da desciclopédia acha que ele é o Stuckkey.Interessante,que quem percebeu foi o Quintinense,antigo sockeador da wikipédia.Muito estranho.--201.6.212.215 14:37, 14 May 2011 (UTC)

Encontrei provas de que eles seriam a mesma pessoa.Essa é a segunda vez que o checkuser dá errado.A primeira foi com um cara com um nome parecido com o do Stuckkey...No dia que o Electro se registrou,eu nem conhecia a wikipédia.Vou dar uma de verificador:

No princípio,Deus criou o céu,a terra e os seres humanos.No dia 19 de fevereiro,ElectroStatic Jolt nasce,em uma estrebaria.O usuário,comeca a editar,quando ele é ameacado por Teles,originando assim sua saída da wikipédia.No dia 08 de abril,ele volta atacando e vandalizando.

Argumentação e evidências iniciais

Ah sim...Vamos ao AutoVolt174...ElectroStatic Jolt existe na linha de brinquedos Transformers.O mais interessante é que o brinquedo se transforma em um Chevrolet Volt.Notem que o termo Volt está presente no nome do sock.Auto é auto de autobot.Um é o modo transformado e o outro o veículo.

O Capitão Feiticeiro e o Samurai...Bom,segundo a mensagem do Feiticeiro ao Pirata Bruxo,ele queria acompanhá-lo nos mares(copiar o nome).Daí ele dizia que era amigo do Electro e outras coisas,como o que ele disse nos Ps que ele era sock do seu amiguinho.Negou tudo,falando que era brincadeira.Até se vingou do Maddox,falando que ele era o JSSX,vulgo Fred Xavier.Ele resolveu se registrar na Desciclopédia para zoar com os usuários.

O Stuckkey foi discutido pelo Samurai Bruxo e mais um cara,que era sabe quem?Quintinense,antigo sockeador.Interessante é que na PU do Electro o própio Electro parabenizou uma mensagem de ataque do Stuckkey.

Demais comentários e hipóteses aqui.Encontrarei o cara na Desciclopédia,e xingá-lo da pior coisa possível.--187.27.41.39 21:33, 18 May 2011 (UTC)

  Declined Insufficient evidence at this point. Please return if there is stronger evidence. -- Avi 03:00, 27 May 2011 (UTC)

蕭抹布@zh.wikipedia

The following request is closed: done. Please do not modify it. No further edits should be made to this discussion.
What is the problem? All of them except one are blocked. Ruslik 18:09, 21 May 2011 (UTC)
OK. I wanna check out whether the excepted one (Vladimirputin1) is a puppet or not. And Qingxin sent an email to unblock-zh@ trying to excuse himself, I'm not very sure about his block too (so I reblocked him yesterday and removed the indefinite tag). --PhiLiP 03:12, 22 May 2011 (UTC)
蕭抹布, Qingxin are   Unrelated
Minyunsiguang, Putin0120, Vladimirputin1, Chenyuanyuan and Chenyuanyuan2010 as well as Yangxiaoyuan05 and Haohuifeng2009 are   Confirmed. Ruslik 07:08, 22 May 2011 (UTC)
OK, thanks! --PhiLiP 08:33, 22 May 2011 (UTC)
The following request is closed: not done. Please do not modify it. No further edits should be made to this discussion.
  Declined, we can't link IPs to accounts. -- Màñü飆¹5 talk [es] 03:28, 23 May 2011 (UTC)
The following request is closed: done. Please do not modify it. No further edits should be made to this discussion.
  Confirmed. No other socks found. Ruslik 15:54, 22 May 2011 (UTC)
The following request is closed: done. Please do not modify it. No further edits should be made to this discussion.
{{inprogress}} -- Dferg ☎ talk 06:47, 23 May 2011 (UTC)
  Done - The database does not have any data regarding wikt:pt:User:Diabo e Santo because it hasn't edited for some time. His account is therefore   Stale

for CheckUser. Notwithstanding you may want to know that wikt:pt:User:Zélia Alves has engaged in vandalism as an anonymous user and for quite some time now (he/she seems to log-out of his/her account to vandalize and then re-login to continue editing the project without being discovered -- I can find vandalism since April 2011). Regards, -- Dferg ☎ talk 07:13, 23 May 2011 (UTC)

Thank you for the information. I have now blocked this person. Would it be possible to give me the IPs that he/she used to vandalize? Or if they are open proxies, just block the ranges? --ValJor 10:29, 23 May 2011 (UTC)
As far as I can see nor the IPs used nor the entire range (which is big) is not an open proxy. Blocking IPs in this case might not work I'm afraid. A tip: please do block account creation when blocking vandal accounts. Thanks, -- Dferg ☎ talk 12:08, 24 May 2011 (UTC)
Please only forget what I struck above and block the open proxy range 85.237.192.0/19 which has been used for vandalism by this user. Regards, -- Dferg ☎ talk 18:50, 24 May 2011 (UTC)
Is there a way for me to determine if a given IP address is part of an open proxy? This user has attacked us today using the IPs 178.17.164.52 and 173.0.56.12 and I'm sure he's going to keep attacking us this way, so it would be great if I could determine myself if an IP is an open proxy. Otherwise I'll keep coming back here...
--ValJor 15:59, 25 May 2011 (UTC)
Yes, both are open proxys. CheckUser does not tell us which IPs are proxys or which ones are not; that needs manual checking. You can use google or robtex to help determine if a given IP is a proxy or not. The English Wikipedia has developed a WikiProject (en:WP:OP) where users can ask for proxy checks on given IPs. Regards, -- Dferg ☎ talk 18:22, 25 May 2011 (UTC)
Hi dferg!
I explained this already but let's do it once again: this vandal is very persistent and very clever. He keeps coming back again and again using many different accounts. And he starts by doing apparently innocuous edits and then after some time, he starts the vandalizing. That's why we have to fight him over and over again. I really wish there was a way to stop him for good, I have better things to do than to try to control a misbehaved child.
Anyway, as Malafaya has already said, it's very clear that Alves_de_Jesus is another one of his sock puppets, the editing style is almost the same. I just want the CU confirmation to have something better than a hunch as the basis for blocking him.
In the case of Balamax, he got my attention for two things:
  1. first the vandal had created a sock puppet making fun of him a while ago (see this); this vandal has already done that in the past (insult one of his sock puppets to make us believe that it's not one of his puppets)
  2. and second, he (Balamax) had stayed away from the project for over a week and then suddenly made a modification right when the vandal was actively making modifications, too.
I'm not very sure that Balamax is another one of his puppets, but I would like CU confirmation just to be on the safe side.
In the case of Mareshenrique, my case is not so solid, he just seemed to be around when the vandal was active, it may be just coincidence, so I just want confirmation that my suspicion is unfounded.
Finally, I would like to ask a CU on Kaluekki. What is my case against him? Well, "kaluekki" is a Malayalam word from which the word caluete is derived and this word has just been added to the DB by user Alves_de_Jesus, who I suspect of being one of the puppets. Do you see now how clever this guy is?
Thanks for all your help so far. I just want to add something that I have said before: I don't come here asking for CUs for fun. If I ask for a CU, it's because I need one. And having to write long explanations each time ends up consuming a lot of time that I could be using to work on the project...
--ValJor 13:36, 27 May 2011 (UTC)
Hello ValJor. The reason to ask was because in past cases I handled I didn't remembered that he used this pattern and because the accounts you linked above seemed that they weren't doing anything wrong. Please note that I know that you're not requesting CU for fun and that ptwiktionary is suffering problems with this user since it was blocked and desysopped. Thanks to you, Malafaya and Striker for providing now very useful information to help in this case and, that said, this is   In progress… - Regards, -- Dferg ☎ talk 19:57, 27 May 2011 (UTC)
Results
  • I find it very   Likely that the users Alves the Jesus and Kaluekki are DS. Others seem not to be obviously related and looks good faith users. Regards, -- Dferg ☎ talk 20:34, 27 May 2011 (UTC)
Hi there!
Is there such a thing as a checkuser bot? :-) We seem to need one now in pt.wikt... This guy attacked today with an account he created in Dec 2009! He may have dozens if not hundreds of dormant accounts!
Also check Medina_de_Ubá, I'm almost sure it's him.
--ValJor 11:03, 28 May 2011 (UTC)
No bot-checkuser avalaible I'm afraid :-)
  Confirmed Kintão, Medina de Ubá and Hexis are Diabo e Santo.
-- Dferg ☎ talk 17:34, 28 May 2011 (UTC)
The following request is closed: not done. Please do not modify it. No further edits should be made to this discussion.
  Declined; we cannot link usernames to IPs. If the IP is causing disruption, please have somebody block it. Only re-report if there is reasonable suspicion for multiple account abuse. Thanks, PeterSymonds (talk) 21:20, 24 May 2011 (UTC)
The following request is closed: done. Please do not modify it. No further edits should be made to this discussion.
I found only one other account - Vitani II, which is already locked. Ruslik 11:56, 28 May 2011 (UTC)
The following request is closed: not done. Please do not modify it. No further edits should be made to this discussion.
  Not done as requests by anonymous users will be declined. Moreover, plain vandal accounts can be blocked without checkuser. -- Dferg ☎ talk 14:05, 28 May 2011 (UTC)