Shortcut: WD:CHECK

Wikidata:Requests for checkuser

From Wikidata
Jump to navigation Jump to search

For the place to request CheckUser access, see Wikidata:Requests for permissions/CheckUser.
Requests for checkuser
This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a checkuser


Please don't ask us to run checks without good reason; be aware of the following before requesting:

  1. Checkuser is a means to choose for difficult cases. If multiple accounts show clear behavior patterns or editing type, please post on the administrator's noticeboard.
  2. Running a check will only be done to combat disruption on Wikidata, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated. Do not post requests for fishing without any grounds.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses. Do not post requests to compare IPs to accounts or IPs to IPs comparisons.
  5. Requests to run a check on yourself will be declined.
Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

To request a checkuser

Cases are created on subpages of Wikidata:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here at the bottom.
Example
If you want to request a checkuser on User:John Doe, enter the text Wikidata:Requests for checkuser/Case/John Doe then click "Make a checkuser request". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.


Translate this header box!

If this page is displaying outdated contents even after you refresh the page in your browser, please Purge.
For older requests, please see Wikidata:Requests for checkuser/Archives

Requests[edit]

31 January 2024[edit]

Rationale, discussion and results[edit]

Reason: Common interest in the entrepreneur Andreas Christodoulou: recreation of items and repurposing of Q60825008. Lymantria (talk) 12:25, 31 January 2024 (UTC)[reply]

Results:


02 June 2023[edit]

Rationale, discussion and results[edit]

Reason: Back with exactly the same behavior. Don't bother to investigate or block IPs, this LTA abuses residential proxies and switches faster than rangeblocks can handle. Elizium23 (talk) 17:29, 2 June 2023 (UTC)[reply]

Results:

16 February 2023[edit]


Rationale, discussion and results[edit]

Reason: "User:Orlando Paride" as his real name may be, or commons:User:Livioandronico2013 on Commons, always connecting from Italian ISPs, has a long and prolific history of cross-wiki abuse. Orlando is a photographer who has uploaded to Commons thousands of high-quality scenes throughout Vatican City, Rome, and Italy. He has then pushed his photos into dozens of Wikipedia projects, as well as Wikidata. However, he was blocked for abuse, then block evasion, then globally locked, and today 10 years later, we are forever chasing his socks as he attempts to force his photos into every article possible, by any means necessary. You will never block/lock enough of the IPv4 address ranges he uses; he always finds more and different providers (or open proxies; I don't know). He has had dozens of socks, and simply abandons them to create more from another IP. Recently he has resurfaced as Monticiano, and the reason is this: this user (on Wikidata alone) has changed image claims for multiple items in Italy:

  1. Q1625428
  2. Q1515300
  3. Q3348571

and there are countless others since his appearance 30 days ago. Furthermore: Orlando is known for being belligerent and vehement denial of wrongdoing. Italian is his native language; he can understand and respond in kind; his English is proficient but obviously a bit broken. Orlando also habitually concludes his talk messages with "Greetings." or "Saluti." or "Grazie." This feature, I believe, is somewhat unique and a good indicator of the same personality/behavior, and we have already seen it here on Wikidata from his freshest sock Monticiano. Elizium23 (talk) 14:44, 16 February 2023 (UTC)[reply]

16 February 2023[edit]

Rationale, discussion and results[edit]

Reason: Right back at it again after the blocks; same behavior, I think it's plain to see this is just an LTA pattern. Elizium23 (talk) 21:31, 16 February 2023 (UTC)[reply]

Results: Original master is Stale. It is highly Likely Monticiano == 7Colli. No further action needed.--Jasper Deng (talk) 09:26, 18 February 2023 (UTC)[reply]

20 July 2023[edit]

Rationale, discussion and results[edit]

Reason: This LTA is back with exactly the same behavior, undoing good faith contributions for impose photographs made by himself, regardless they're superseded by alternative versions. Currently he's doing that with entries Q153441 (diff. 1), Q1103801 (diff. 2), Q2293936 (diff. 3), Q945850 (diffs. 4, 5 and 6) and Q683074 (diff. 7]). This user is also known for abuse residential proxies and changing his IP range fastily prior to a rangeblock can be applied, so, for avoid future vandalism via other IPs, a temporal protection for those entries may be also considered. 81.41.175.237 17:36, 20 July 2023 (UTC)[reply]

Results: Declined because we will make  No comment on IP addresses.--Jasper Deng (talk) 19:09, 20 July 2023 (UTC)[reply]

Could you at least block him? Trade (talk) 22:04, 27 July 2023 (UTC)[reply]
It won't do any good, @Trade. This user is using techniques to evade IP blocking. I've initiated communication with the relevant Italian authorities regarding the underlying cybercrimes. They're aware and informed. Elizium23 (talk) 22:57, 27 July 2023 (UTC)[reply]
Cybercrimes?? Trade (talk) 23:34, 27 July 2023 (UTC)[reply]
Yes; the Wiki Email function is available to you if you'd like further information. Elizium23 (talk) 23:45, 27 July 2023 (UTC)[reply]

10 February 2024[edit]

Rationale, discussion and results[edit]

Reason: New account created to come back with exactly the same behavior such like their other accounts. See also Commons:Requests for checkuser/Case/Livioandronico2013#PubblicUsername. 83.61.247.43 14:41, 10 February 2024 (UTC)[reply]

 Info: The IP is also imposing photographs uploaded by this LTA's socks into dozens of entries. 83.61.247.43 23:40, 10 February 2024 (UTC)[reply]

Results:

15 October 2023[edit]

Rationale, discussion and results[edit]

Reason: Similar user names. All three of them have created three items on entrepreneurs linking to famouswiki.net on October 10-11. Is there more? Lymantria (talk) 13:26, 15 October 2023 (UTC)[reply]

Results: Confirmed Krebssade2, Sloangra4, Tapeucky2, Mincemaria2, Yepsdai5, Aukshee4, Chadeye4, Tpmuara4, Whimsnic3, Gorybar4, Tokayyogin4, Oxusnha5, Soledsi3, Soilskha6, Reranji3, Cupidfu4, Tealscues2, Tamitre4, Pecangis7, Lairsser4, Herzlreel6, Gobislob4, Tautsu78, Bitmay5, Enactg4, Specslio8, Visesni3, Leanmai7, Nubsstint45, Joehunte4, Robedlulu7, Windiow3, Crookdee4, Aloneteem6, Goludm6, Baumth67, Cotesdo78, Aloudunpi6, Tracypo0, Praialef45, Gluedew3, Hildka56, Tokyorice4, Deahare4, Apesmao98, Acmejun3, Beerfstee6, Dulytace4, Malayscs4, Aepnsdf3, Capekt6, Tarotabe34, Puhets5, Dgaisy7, Exesocu56, Pawlsport2, Enorch45, Mitesha3, Okaysnoe4, Cagedais2, Yuckrae3, Progbra2, Genhelp7, Ginasa23, Alivsew3, Tubasc87, Moansle5, Pygmyed5, Sabpce6, Heftd42, Cloysp3, Lainna6, Capfer48, Dtymid7, Vollio89, Hjuibh67, Coilo65, Quilpg67, Polerf45, Slinvd34, Rubinstex6, Povvf34, Vloosww23, Polcd34, Cvgfe34, Neviso87, Wrftsed1, Polwedq3, Burkdf34, Sighnber4, Hguolio0, Vdeweq23, Perpoer45, Meced10, Maenge23, Bedec89,Juertfq23, Daubpu6, Taniar5, Hidesr4, Jockhus5 and Sopiuo98

✓ All blocked and tagged. See Category:Wikidata sockpuppets of Colpio78 (102 accounts!) --Alaa :)..! 15:44, 16 October 2023 (UTC)[reply]

05 December 2023[edit]

Rationale, discussion and results[edit]

Reason: Similar user names, similar MO. In particular among four of them similar creation of items about entrepreneurs whose last letter they doubled. Lymantria (talk) 16:37, 5 December 2023 (UTC)[reply]

Also
Thanks. --Lymantria (talk) 08:18, 11 December 2023 (UTC)[reply]

Results: Confirmed Coiulo56 = Voliper7 = Volvlope4 = Boliper6 = Holiuy8 = Dolioper5 = Folioe89 = Coliper4 = Ajaxce87 = Zopiou98 = Odfeen89 = Cher879 = Xoplio56 = Folpiu6 = Naban09 = Trankui2 = Trankil2 = Operty6 = Bolperh67 = Vuoila67 = Bolpio67 --Alaa :)..! 17:59, 11 December 2023 (UTC)[reply]

✓ All blocked and tagged Thank you! --Lymantria (talk) 21:26, 11 December 2023 (UTC)[reply]

25 March 2024[edit]

Rationale, discussion and results[edit]

Reason: Similar user names, similar MO. In particular creation and editing of items about entrepreneurs whose last letter they doubled. See also Category:Suspected Wikidata sockpuppets of Colpio78 for some earlier ones I blocked (the category will also contain stale ones). Lymantria (talk) 21:38, 25 March 2024 (UTC)[reply]

Results: Confirmed; ✓ blocked and tagged --Alaa :)..! 21:55, 25 March 2024 (UTC)[reply]

11 April 2024[edit]

Rationale, discussion and results[edit]

Reason: Similar user names and similar MO. In particular creation of items bout entrepreneurs with incomplete last names, compared to doubling last letters before. Among the items are recreations of items earlier in focus from this sockfarm. Lymantria (talk) 11:46, 11 April 2024 (UTC)[reply]

Results:

11 April 2024[edit]

Rationale, discussion and results[edit]

Reason: BLP violation. Blocked indef in commons, the same behavior exists in wikidata.Fumikas Sagisavas (talk) 02:50, 11 April 2024 (UTC)[reply]

Results: