Open main menu
Wikipedia

Wikipedia:Requests for checkuser

(Redirected from Wikipedia:RFCU)
For the place to request access to the tool, see Wikipedia:Requests for permissions.
Shortcuts

Checkuser is the process of checking information about two or more users (including named users and IPs). Special users are able to check if two or more accounts have been used from the same computer. These users also see User agents. This can help them decide if two accounts are related in the way described above. It is also possible to see if a user is editing from an open proxy.

On this page, users can request some users or IPs to be checked. Good reasons should be given for why a checkuser is needed; you should provide links which show the questionable edits, etc. Questions should usually be created so that they can be answered by yes or no. Responses will be short in order to comply with Wikipedia privacy policy. Sensitive information (like the IP addresses used by an account) are usually not reported. The results are not always clear, and a decision should not be made only on the basis of checkuser results.

Use of the toolEdit

This tool is to be used to fight vandalism, to check for sockpuppet abuse, and to limit disruption of the project. It must be used only to prevent damage to the project.

The tool should not be used for political control; to apply pressure on editors; or as a threat against another editor in a content dispute. There must be a valid reason to check a user. Note that alternative accounts are not forbidden, so long as they are not used in violation of the policies (for example, to vote more than once or to make it look like more people support an idea). Checkusers will refuse a request, if the reason for checking is not good enough to warrant the use of the tool.

Please see the CheckUser policy for all the rules related to CheckUser.

User with Checkuser accessEdit

The technical list can be found at Special:ListUsers/checkuser.


ArchivesEdit

Current requestsEdit

Please add requests to the top of the list.


Archives
2007
2008
2009
2010
2011-2013
2014
2015
2016
2017


RfD possible socksEdit

It seems to be likely that these two accounts are the same user, considering the latter was apparently created specifically to !vote in Wikipedia:Requests for deletion/Requests/2019/Chedi Amir, which Shady.photography is heavily involved in. Vermont (talk) 10:37, 13 October 2019 (UTC)

VandalsEdit

All accounts vandalizing African Americans. If confirmed, please block the underlying IP's. Zaxxon0 (talk) 04:34, 8 September 2019 (UTC)

They're all crosswiki LTA's. Vermont (talk) 12:14, 8 September 2019 (UTC)
All locked already so nothing to do here. -DJSasso (talk) 11:48, 9 September 2019 (UTC)

Single purpose accounts posting on RfD for GRUH FinanceEdit

These two accounts appear related to me as one of them (MilesML05) has only commented on the GRUH Finance RfD and edited that page, and the other account's main focus has also been this article and the RfD. They both voted "keep" on the RfD. Reception123 (talk) 11:39, 20 August 2019 (UTC)

Not sure there is evidence for CU, but worth watching. Closing admins on RfD do take into account users that have only minimal edit histories.--Peterdownunder (talk) 11:54, 20 August 2019 (UTC)
Okay, will continue keeping an eye on them, though if admins don't take them into account that is fine. Reception123 (talk) 11:55, 20 August 2019 (UTC)
@Peterdownunder: Just FYI would like to add that Ronojoy675 has also appeared making the same type of edits and again voting for "keep". Reception123 (talk) 09:40, 24 August 2019 (UTC)

Single purpose accounts posting on RfD for Decision StreamEdit

All appear to be single purpose accounts used only to comment on the RfD for Decision Stream or edit the page itself. Behaviour is similar so it appears a CU is warranted. Side Note: Although nothing CU can do, there seems to be some questionable IP activity on that RfD as well. Desertborn (talk) 21:18, 6 August 2019 (UTC)

They are all coming from different IPs in different regions so I can't say they are definitely sockpuppets. However they may be meatpuppets. -DJSasso (talk) 10:24, 7 August 2019 (UTC)

This and the request below should maybe be processed together since it may be one giant paid editing ring. Computer Fizz (talk) 07:00, 7 August 2019 (UTC)

Single purpose accountsEdit

Single purpose accounts voting to keep on the article Fatih Ürek. Behavior evidence is so similar that it's likely they are socks. Zaxxon0 (talk) 23:47, 27 July 2019 (UTC)

There's more accounts now. Very likely either sockpuppets or meatpuppets. Regardless of which, it's evident their only purpose here is to !vote in that RfD. If it turns out they aren't related by IP, I'd be in favor of blocking them anyways as SPA's and meat/sockpuppets. Thanks, Vermont (talk) 13:59, 28 July 2019 (UTC)
Can't comment on the IP, sorry. If the other show similar behaviour, do we need a CU to make sure? (aka. Duck test..)?--Eptalon (talk) 14:25, 28 July 2019 (UTC)

Џамбас-РхEdit

Апостоли-13 said that he wrote the article Rasim Bajrović, but the article was started by Џамбас-Рх. They both have a similar interest in that person. Nigos (talk · contribs) 09:45, 27 July 2019 (UTC)

Both accounts are now locked; no action is necessary. Thanks, Vermont (talk) 13:53, 27 July 2019 (UTC)
Actually, only the second one is presently locked. Working on that. Vermont (talk) 13:57, 27 July 2019 (UTC)

Suspected socks of banned userEdit

The first account made this edit, which the second account made it here. The master of the first account is a banned editor who also shows interests in this (by third account). Checking to see if they are related, and if there are other socks. -★- PlyrStar93 →Message me. ← 20:04, 13 July 2019 (UTC)

The last two seem unconnected technically despite the edits, the initial one is to the already locked 'Aliboyrock'. -- Lofty abyss 20:17, 13 July 2019 (UTC)
The behavior of these accounts still match up (accounts #1 and #2 are pretty much the same; account #3 matches a bunch of enwiki edits - eg. diff). That said, I'm inclined to believe the person is using a bunch of proxy/VPN to hop around the world because this individual has recently been editing with IP from various different locations. -★- PlyrStar93 →Message me. ← 20:24, 13 July 2019 (UTC)
I ran a checkuser on all three of them, and I have to say that they are located in different time zones (first one: American continent, second/third: Europe). Also, interest for Chess is common, in the world, so we don't have any links to the third account. As to the irst and second: they are in different time zones, and sibce the edits are at different times, we can rule out VPNs or similar. In shot: I don't see a connection...--Eptalon (talk) 21:19, 13 July 2019 (UTC)
I can supply with anon edits at a different wiki showing the same individual hopping IP around different locations. The edits are all made within a short period, and changing IP after one gets reverted. 1, 2,3, made within 5 minutes and locations involve Egypt and Turkey; 1, 2, 3, 4 four countries in three continents within an hour;1, 2, 3, 4 editing same page within two hours, location between four countries in Europe, Asia and Africa and there is no way these edits were made by different people. I would like to see some opinions about how this is possible without proxy or VPN. What to look at from the third account isn't simply chess, the "Lubek" stuff and the link to another enwiki sock's edit is what really needed attention. And I wouldn't call five hours of time difference on a weekend "different time zone" especially when the text added is almost identical. -★- PlyrStar93 →Message me. ← 22:28, 13 July 2019 (UTC)
All three accounts above are currenlly globally locked - so there's nothing we can do. As to the evidence you provide: CU policy doesn't allow me to directly comment on IPs..--Eptalon (talk) 22:42, 13 July 2019 (UTC)
You may not all know this: there is propriety software on the market which hides your real location and uses spare computing power anywhere in the world. If this person or group is using such software they will appear to edit from many places but in reality be in the same room. I apologise for not remembering the name of this software, but I assure you it does exist. Macdonald-ross (talk) 10:35, 7 August 2019 (UTC)
Also the people who allow others to do it get paid in bitcoins right? Or am i thinking of something else. — Preceding unsigned comment added by Computer_Fizz (talk • contribs)

Checkuser requestEdit

Both copy and pasted articles about baseball players from enwiki, there may be more. Zaxxon0 (talk) 03:29, 4 July 2019 (UTC)

@Zaxxon0: Non-CU comment: has this caused a problem? People are allowed to use multiple accounts if they don't use them to cause trouble or evade restrictions. Besides that, it's very possible that friends or classmates (who could be using related IP addresses) have a project that involves working on similar pages. This page is for identifying users who need to be blocked, and you haven't indicated such a need here. --Auntof6 (talk) 04:10, 4 July 2019 (UTC)
They aren't allowed to edit in the same topic areas at the same time (or close to it) with undisclosed accounts though. That being said there is 10 days between edits from the two so I won't be doing a check now. If they do start editing concurrently I will look. -DJSasso (talk) 11:28, 4 July 2019 (UTC)

Thita Rangsitpol ManitkulEdit

The article Thita Rangsitpol Manitkul is known for a global sock puppetry with many global locks, see for example here or here. All three accounts and some IPs were active in Wikipedia:Requests for deletion/Requests/2019/Thita Rangsitpol Manitkul. Greetings from Germany, --Snookerado (talk) 17:12, 30 June 2019 (UTC)

  • If these are sockpuppets, the RfD's result should probably be reconsidered. Vermont (talk) 11:04, 1 July 2019 (UTC)

Vandal?Edit

usernames are similar and they made bad edits. They also act similarly. Nigos (talk · contribs) 01:27, 27 June 2019 (UTC)

  • Blocked along with a couple sleepers. -DJSasso (talk) 12:04, 27 June 2019 (UTC)

Livs17898361Edit

New accounts with similar names were made within 2 mins of each other. Nigos (talk · contribs) 07:15, 26 June 2019 (UTC)

@Nigos: Non-CU comment: These users have made no changes, so even if they are the same person I don't think there would be anything to be done. People are allowed to have multiple accounts under certain circumstances. --Auntof6 (talk) 07:50, 26 June 2019 (UTC)
Correct, if they haven't done anything wrong there is nothing to do here yet. -DJSasso (talk) 10:55, 26 June 2019 (UTC)

Tehran Regional Arbitration Centre (TRAC)Edit

3 users removing the QD/RfD templates at Tehran Regional Arbitration Centre (TRAC). Seems to me it's either sockpuppetry or meatpuppetry. Thanks, Vermont (talk) 10:41, 30 May 2019 (UTC)

  •   Done and blocked. -DJSasso (talk) 11:07, 30 May 2019 (UTC)
Thanks! Vermont (talk) 11:22, 30 May 2019 (UTC)

Possible sockpuppetsEdit

Making similar photograph changing edits to Gautam Raj Anand. Also, both usernames have connections with Gautam Raj Anand. — FR 06:51, 13 May 2019 (UTC)

I think the username you originally had second was not what you mean. I have fixed it. I did the check and blocked them and a sleeper. -DJSasso (talk) 13:52, 13 May 2019 (UTC)

Very Likely SockpuppetsEdit

(See this timeline)

I am seeing that all three of these users have vandalized Gang and the timing is extremely suspicious. Because Ultimate curry was the first one to disrupt Gang that leads me to believe that he is the sockpuppeteer of all three listed accounts. Even if it is not sockpuppetry, they are clearly vandalism-only accounts for obvious reasons and they need to get blocked indefinitely. Thanks --Examknow (lets chat!) 23:42, 10 May 2019 (UTC)

Also, looking at the CentralAuth information, I have found that NickFowler123 and Daddyd*ckboy were also created within one minute of each other. Accounts created one minute apart and then vandalize the same pages. Doesn’t really take a detective to figure this one out. --Examknow (lets chat!) 23:46, 10 May 2019 (UTC)
I have blocked NickFowler123 and some sleepers. The IPs locate to a school so it is possible they are just a bunch of friends fooling around in a computer lab but it is enough for me to block. -DJSasso (talk) 13:57, 13 May 2019 (UTC)
@DJSasso: That would make a lot of sense. Thanks for running the check --Examknow (lets chat!) 16:19, 13 May 2019 (UTC)

LTA Sleeper purgeEdit

Suggest underlying IP addresses for the above accounts be investigated for further sleeper accounts of this LTA. Established pattern of attacks on this page. Operator873talkconnect 22:37, 3 May 2019 (UTC)

User:Thomas Pennington, already dealt with, was from the same IP. -- Lofty abyss 22:47, 3 May 2019 (UTC)
They all relate to w:en:WP:LTA/DENVER, BTW. --IanDBeacon (talk) 23:13, 3 May 2019 (UTC)
All checked, nothing new found, IPs blocked.--Peterdownunder (talk) 12:31, 9 May 2019 (UTC)

SockpuppetsEdit

Per this SPI on enwiki. In this wiki, all of them have edited Kunaal Vermaa.  — FR 11:46, 29 April 2019 (UTC)

  Done. -DJSasso (talk) 12:37, 29 April 2019 (UTC)

Possible sockpuppetsEdit

Please inspect these. They're editing Vicky Kadian (actor) within several minutes of one another. Angela Maureen (talk) 01:58, 3 April 2019 (UTC)

They are indeed all editing from the same address. -- Lofty abyss 03:24, 3 April 2019 (UTC)
They should be socks of Vhacker Vicky kadian. -★- PlyrStar93 →Message me. ← 03:49, 3 April 2019 (UTC)
Data only goes back a few months, so can't confirm that, but if so is this a COI issue too? -- Lofty abyss 06:29, 3 April 2019 (UTC)
I've blocked the accounts. It's either a COI or paid editing; regardless, it's sockpuppetry. Vermont (talk) 10:22, 3 April 2019 (UTC)

Sockpuppet?Edit

Qtip292946382 Please check. Suspected to be related to 173.235.7.86 --Jollyeditor (talk) 20:32, 26 March 2019 (UTC)

Can't match a user to an IP so won't be able to comment one way or the other. Can only comment on named accounts. -DJSasso (talk) 11:02, 27 March 2019 (UTC)


Suspected sockpuppetsEdit

Similar user names and similar first posts to Userpage. Operator873talkconnect 03:19, 22 March 2019 (UTC)

Also seeing some similar behaviour from Myauntisdead (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · SUL · CA · checkuser (log)). Hiàn (talk) 03:32, 22 March 2019 (UTC)
Doesn't seem related to the others. -- Lofty abyss 05:00, 22 March 2019 (UTC)

Same I reported both of them too --Dreamlover8 (talk) 03:33, 22 March 2019 (UTC)

One more, this is China people (中国的人).--Cohaf (talk) 04:20, 22 March 2019 (UTC)

    • @Lofty abyss:So the one Hian added is technically unlikely to the rest (the 2 added by Operator873 and me) which are confirmed to each other? Sorry I don't quite get your meaning. Thanks for checking and clarification in advance?--Cohaf (talk) 09:11, 22 March 2019 (UTC)
      • They don't seem to be coming from the same, exact IP address, at least. -- Lofty abyss 17:23, 22 March 2019 (UTC)
  •   Done and blocked. They are hitting VPNs so have different IPs, but WP:DUCK applies and some other stuff. -DJSasso (talk) 17:25, 22 March 2019 (UTC)

Edit

These editors may be related to this case on English Wikipedia. AnniCool created a page here that has been deleted multiple times on the English Wikipedia as a draft due to undisclosed paid editing and being created by banned users. EARTHSCIENCETEACH showed up to vote keep on the RFD. They're probably related, but it might be worth examining further to see if there's more related undisclosed paid editing. Only (talk) 02:04, 24 February 2019 (UTC)

Based on technical evidence they seem unrelated (although, of course, paid editing can't be verified or not with checkuser). -- Mentifisto 08:42, 24 February 2019 (UTC)
Thanks for checking, Mentifisto. Seems like the article has attracted another account and IP as well. I guess we'll see how the RFD plays out. Only (talk) 17:36, 24 February 2019 (UTC)

Џамбас-РхEdit

Апостоли-13 said that he wrote the article Rasim Bajrović, but the article was started by Џамбас-Рх. They both have a similar interest in that person. Nigos (talk · contribs) 09:45, 27 July 2019 (UTC)

Both are globally locked, no checkuser necessary....--Eptalon (talk) 15:28, 27 July 2019 (UTC)
Retrieved from "https://simple.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser&oldid=6689702"