Steward requests/Checkuser/2024-01

Requests

SotiaIIe@no.wikipedia

Comment: As Heymid is globally locked since two and a half years back, they cannot be confirmed to Heymid, but based on the editing pattern of these accounts they are very likely to be Heymid/CHEEIZY. Same editing pattern on svwiki too. EPIC (talk) 20:46, 28 December 2023 (UTC)

Unless there is a special need for investigation, it seems like this can just be handled in our SRG, so is there any reason to know if SotiaIIe is the same user as EPIC og EstrellaSuecia 4? --Sotiale (talk) 07:35, 29 December 2023 (UTC)

Pinging Asav, who initially requested that I request a CheckUser check. Perhaps they can answer your question. EdoAug (talk) 15:27, 29 December 2023 (UTC)

The purpose is to establish whether there is an IP address than can be blocked, as the user keeps reappearing with new sockpuppets. Asav (talk) 16:54, 29 December 2023 (UTC)

As mentioned on nowp, judging by the logs here on Meta-Wiki, many of the accounts seem to be created from a dynamic mobile network range in Sweden. Therefore, blocking individual IP addresses would probably not do much in this case. So, rangeblock is a solution, but not a very good one, as this mobile range belongs to a large network provider in Sweden and a rangeblock would therefore affect many users. EPIC (talk) 17:09, 29 December 2023 (UTC)

Template:Declined Even before this was posted, 3 stewards had already been involved in checking this on loginwiki. You can safely assume that abusive LTA names get checked faster than a heartbeat after being reported at SRG/IRC. -- Amanda (she/her) 06:03, 3 January 2024 (UTC)

Banksyfuture@zh.wikipedia

Template:CU request Banksyfuture = Siomaimaster, and I suspect the rest are on proxies, and I think you could just block them. -- Amanda (she/her) 06:13, 3 January 2024 (UTC)

Гусейнага@tly.wikipedia

Template:Re thank you! I will write to the admin on tly.wiki to sort these things out. Different IPs for certain – Toghrul R (talk) 08:23, 6 January 2024 (UTC)

NeverLoseYourSmile Lipovani Orthodox@ro.wikipedia

The explanation is too abstract, so could you be a little more specific? The third account is locked, so it would be good if you could specify how it relates to the remaining accounts. Thanks! --Sotiale (talk) 03:15, 7 January 2024 (UTC)

I am not so sure about NeverLoseYourSmile Lipovani Orthodox. However, I am certain to a certain degree that Maghiaria = Usernameuwuahh. Both have vandalized articles about Romanian localities/regions, primarily by modifying the region/country to which those localities/regions belong (compare this with this, for example). Maghiaria was created on 10 November 2023, but after a long block log (see here), they have been blocked for 1 month on 2 January 2024. Usernameuwuahh was created on 4 January 2024, possibly due to the long block applied to the Maghiaria account. --NGC 54 (talk｜contribs) 03:34, 7 January 2024 (UTC)

Thanks, then I'll do some investigation on Maghiaria and Usernameuwuahh, and if NeverLoseYourSmile Lipovani Orthodox is the same user, maybe they will come up in the results. --Sotiale (talk) 03:38, 7 January 2024 (UTC)

Template:Quote From a techncial point of view. --Sotiale (talk) 03:42, 7 January 2024 (UTC)

589wesleywiki@zh.wikipedia

I am supplementing some details on account analysis:

• Characteristics of accounts created within a continuous timeline can be identified from the account creation logs. For instance, the subject of this report can be traced in the logs to establish the following timeline:
  1. November 28, 2023 zh:Wikipedia:傀儡調查/案件/589wesleywiki#2023年11月28日 November 30
  2. December 2, 2023 December 7/December 21The information that we had to conduct 2 checkuser processes to identify most of the accounts registered on the same day indicates that the reported accounts may have attempted to evade checkuser and achieved some initial success.
     • 05:43(UTC) ManCNM
     • 04:38(UTC) KKChkg
     • 04:37(UTC) MadamSiu
     • 04:35(UTC) YuenSir
     • 04:34(UTC) Teleson
  3. December 5, 2023
     • 12:11(UTC) HKshing
     • 12:08(UTC) MrJeffPDSM
  4. December 26, 2023
     • 10:33(UTC) Matthewsir
     • 10:32(UTC) Queen Ann9
     • 05:41(UTC) Tango9lo
     • 05:39(UTC) MoAmos
  5. December 30, 2023
     • 05:28(UTC) Greenhan09
     • 05:27(UTC) Green08han
• Series of accounts are mostly associated with Chinese language (zh) television channels and lists.

Off-topic information unrelated to this report:Several accounts in this report have records of account creation on ja.wikipedia.org, and sometimes on en.wikipedia.org. As multiple accounts exhibit this phenomenon, there might be additional findings in cross-wiki analysis. Rastinition (talk) 23:36, 6 January 2024 (UTC)

According to the query, the account you suggested, the accounts requested above, and the socks found were all created on zhwiki. Which account was created on jawiki? --Sotiale (talk) 03:35, 7 January 2024 (UTC)

Template:Quote When account creation in the ranges they primarily use is blocked, the pattern is to create accounts through other common ranges that are not blocked, including VPNs, and then go back to the wider ISP, which cannot be blocked, and make edits. Their methods seem to be evolving. --Sotiale (talk) 03:35, 7 January 2024 (UTC)

Responding to the question raised by Sotiale at 03:35, January 7, 2024: Since my capability is limited to individually reviewing Global account information, I will record the data that has already been examined here.

1. MadamSiu
   • ja.wikipedia.org / zh-yue.wikipedia.org / en.wikipedia.org / commons.wikimedia.org
2. MoAmos
   • ja.wikipedia.org / zh-yue.wikipedia.org / en.wikipedia.org
3. [1]
   • ja.wikipedia.org / zh-yue.wikipedia.org / en.wikipedia.org
   • Chris gor09
   • ja.wikipedia.org / zh-yue.wikipedia.org / en.wikipedia.org
4. Matthewsir
   • ja.wikipedia.org / zh-yue.wikipedia.org / en.wikipedia.org
5. KKChkg
   • ja.wikipedia.org / zh-yue.wikipedia.org / en.wikipedia.org
6. LTCmoris
   • zh-yue.wikipedia.org / en.wikipedia.org
7. Green08han
   • zh-yue.wikipedia.org / en.wikipedia.org
8. ManCNM
   • en.wikipedia.org
9. TeacherKing
   • en.wikipedia.org
10. ChanHims08
    • en.wikipedia.org
11. Wiki iam23
    • en.wikipedia.org
12. Teleson
    • en.wikipedia.org
13. Queen Ann9
    • zh-yue.wikipedia.org
14. Greenhan09
    • zh-yue.wikipedia.org
15. HoPDSM
    • zh-yue.wikipedia.org
16. MrJeffPDSM
    • ja.wikipedia.org

Rastinition (talk) 06:58, 7 January 2024 (UTC)

Elmond@zh.wikipedia

Template:CU request Template:Quote Yes, I realize that it has been over 4 years since I handled checkuser on zhwiki. How many people would have hated me? When I think about that, I feel sorry for them. But what can I do, it's my job. --Sotiale (talk) 14:47, 19 January 2024 (UTC)

To be honest, I don't think you should worry about the haters. You have done a great service for the zhwiki community, and I believe a lot of people appreciate your help as well. $\int$（☎） 19:41, 19 January 2024 (UTC)

Αρνόλδος@el.wikipedia

Template:CU request Template:Quote From a technical point of view. Since this is a technical finding, I will provide the necessary information if your community requests it, as long as it does not violate the Wikimedia privacy policies. --Sotiale (talk) 05:25, 23 January 2024 (UTC)

被災地にテンガを届ける煉獄コロアキ@zh.wikipedia

It looks typical of jawiki LTA. I'm not sure what action I should take on zhwiki about this. It doesn't seem appropriate for me to block all ranges used by jawiki LTA. What do you think? --Sotiale (talk) 14:05, 19 January 2024 (UTC)

How many users will be affected if block all ranges used by jawiki LTA? Thanks. SCP-2000 07:00, 20 January 2024 (UTC)

Because they are so popular and widely traveled, it is likely against policy to obtain information on all ranges affected by it. --Sotiale (talk) 05:27, 23 January 2024 (UTC)

I looked at it again in many ways, but it would be better if this were handled on SRG. I considered mass rangeblocks for zhwiki, but this would result in blocking most IPs from some countries, only for them to move to another wiki and the same problem would occur again. --Sotiale (talk) 15:10, 25 January 2024 (UTC)

JunzuoL@zh.wikipedia

Template:CU request Template:Quote From a techncal point of view. --Sotiale (talk) 11:58, 28 January 2024 (UTC)

Lincoln229@zh.wikipedia

Template:CU request Template:Quote --Sotiale (talk) 12:04, 28 January 2024 (UTC)

Pktlaurence@zh.wikipedia

Template:CU request Template:Quote --Sotiale (talk) 12:10, 28 January 2024 (UTC)

StrongBacking@zh.wikipedia

Template:CU request Template:Quote --Sotiale (talk) 12:19, 28 January 2024 (UTC)

Ayselhs@az.wikipedia

Template:CU request Template:Quote --Sotiale (talk) 15:17, 30 January 2024 (UTC)

Thank you! Nemoralis (talk) 18:07, 30 January 2024 (UTC)

AryaPadaiKadanthaAurelius@ta.wikipedia

Template:CU request Template:Quote From a technical point of view. --Sotiale (talk) 12:02, 31 January 2024 (UTC)

Tamil career advise@ta.wikipedia

Template:CU request Template:Quote From a technical point of view. --Sotiale (talk) 12:08, 31 January 2024 (UTC)

Template:Ping Thanks for checking. Is it possible to block these users globally since they contributed across Wikipedia project, and created some articles too?

Also, I found another ID links via edit patterns with these IDs, and the ID is Template:User3. I don't know whether you can have a look. Thanks. --AntanO 15:21, 31 January 2024 (UTC)