Commons:Requests for checkuser

Shortcut: COM:CHECK, COM:RFCU Does your request belong here? This is the place to request sockpuppet checks or other investigations requiring CheckUser privileges. Checkuser is a last resort for difficult cases. Use other methods first. You can try posting on the administrator's noticeboard for example. Please do not ask us to run checks without good reason: These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments. Request completed Confirmed Likely Possible Unlikely Inconclusive Unrelated Completed Stale Request declined Declined Checkuser is not for fishing. Checkuser is not magic pixie dust. The CheckUser Magic 8-Ball says  It looks like a duck to me Checkuser is not a crystal ball. Information Additional information needed Deferred to  Doing…  Info Running a check will only be done to combat disruption on Commons, or as required to assist CheckUser investigations on other Wikimedia wikis. Valid reasons for running a check include vandalism where a block of the underlying IP or IP range is needed, disruptive sockpuppetry, vote-stacking, and similar disruption where the technical evidence from running a check would prevent or reduce further disruption to Wikimedia projects. Requests to run a check with ambiguous reasoning will result in delays - please provide a rationale at the time you make the request Show what the disruption to the project is, and why you believe the accounts are related. Requests to run a check on yourself will be declined The privacy policy does not allow us to make a check that has the effect of revealing IP addresses. Outcome Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Check back regularly to see the outcome of your request. Closed requests are archived after seven days. Privacy violation? If you feel that a checkuser has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombudsman commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check: Cases are created on subpages of Commons:Requests for checkuser/Case. Creating a request Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only. Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it. There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say. If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here. Example If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser." You will be taken to a page where you can fill out the request. Please make your request there brief and concise. Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Completed requests

AtomicGagou

view • edit • history • watch
Filed: 12:37, 4 May 2013 (UTC)

• AtomicGagou (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• 90.84.144.76 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

• Holen-mor (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• 82.124.181.121 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

• 90.61.234.2 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

Rationale

• Reason: Per the edit target[1], the edit pattern[2] and the wording of the edits[edit-summary][edit-content] it is very likely that IP 90.84.144.76 is a sock-puppet of AtomicGagou (talk · contribs), who is currently blocked (2 weeks) for severe disruption (see Commons:Administrators' noticeboard/User problems#User:AtomicGagou and bogus DR). If confirmed, this would mean a confirmed case of block-evasion, which would suggest block-extension. As this user shows a rather aggressive and disruptive edit-behaviour, I prefer a confirmation by CU. Túrelio (talk) 12:37, 4 May 2013 (UTC)

A few hours later Holen-mor (talk · contribs), who had only 1 edit in 2009, suddenly reappeared and repeated the edits of IP 90.84.144.76[3]. Please include this account into the CU investigation. --Túrelio (talk) 16:52, 4 May 2013 (UTC)

And the next one 82.124.181.121 (talk · contribs). --Túrelio (talk) 18:14, 4 May 2013 (UTC)

Results

• I hadn't seen this request yet, but I've extended the duration of AtomicGagou's block. Mathonius (talk) 13:59, 4 May 2013 (UTC)

• Confirmed I believe there exists a relationship. -- Magister Mathematicae 16:08, 4 May 2013 (UTC)
  • Also Confirmed for Holen-mor (talk · contribs). Trijnstel_talk 17:58, 4 May 2013 (UTC)
    • The IP adress 82.124.xx.xx is also Confirmed. Trijnstel_talk 18:29, 4 May 2013 (UTC)
      • In case it wasn't clear, 90.61.xx.xx is also Confirmed.
      • No need to mention more I think (unless they are accounts), since all can be blocked as a  It looks like a duck to me or vandal. Trijnstel_talk 18:52, 4 May 2013 (UTC)

Kolega2357

view • edit • history • watch
Filed: 01:30, 29 April 2013 (UTC)

• Kolega2357 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Kolega2357 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• 109.92.21.151 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

Rationale

• Reason: I believe Kolega2357 has a duel personality with 109.92.21.151. The IP comments on the hat collecting allegation [4] not just here, but on other wikis with the same user (see global contribs). Then there's the IP signature, "Greetings from Belgrade", which is a city in Serbia. Kolega2357's userpage notes that he also lives in Serbia. I find it quite a coincidence. Please also see the steward checkuser request [5] where he is accused of being a sock of a globally locked account.. Techman224^Talk 01:30, 29 April 2013 (UTC)
• I endorse this request (if it helps) —Mono 18:58, 30 April 2013 (UTC)

Results

• Unrelated, judged by the technical evidence I can't find a clear connection between those two. Trijnstel_talk 18:27, 4 May 2013 (UTC)

BCFeh

view • edit • history • watch • talk
Filed: 07:00, 12 April 2013 (UTC)

• BCFeh (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• BCFeh (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• 178.195.216.87 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

Rationale

• Reason: Verstoss gegen Anonymität de:Wikipedia:Anonymität (Einfügen des vollen RL Namen und Wohnort, gegen den Willen eines users) ist einer IP gemacht worden, und das ist der User denn ich dahinter vermute. Ist aber vorallem auf de: Aktiv (und er weiss, dass ich auf meiner Anonymität bestehe), und dort mag er mich ganz und gar nicht. Wäre mal wieder eien typische BNS-Aktion von ihm, die er regelmässig abzeihet wenn ihm die Argumente ausgehen. Bobo11 (talk) 07:00, 12 April 2013 (UTC)
  •  Comment See also this previous request on meta (on the CU request page for stewards). Trijnstel_talk 22:00, 12 April 2013 (UTC)

Results

• Confirmed. User:Pattypious looks also be related to the account User:BCFeh and the IP address. Trijnstel_talk 17:46, 5 May 2013 (UTC)

Godhår97

view • edit • history • watch
Filed: 14:38, 6 May 2013 (UTC)

• Godhår97 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Petter Falch (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: Same MO: for example, both upload collage images of Scandinavian subjects (culture/cities) comprised, at least in part, of non-free images collected from the web - see contribs. Godhår97, for example, uploaded File:Sedish culture.PNG on 2. March (and was blocked for one week on 23 April 2013); Petter Falch then recreated it 5. May (complete with the same misspelling of Swedish in the title). Both have uploaded the same street screen taken from Google (Godhår97 - File:Jernbanetorgetioslo.png and Petter Falch - File:Jernbanetorget new.PNG). Эlcobbola _talk 14:38, 6 May 2013 (UTC)

Results

• Easy case, they are clearly Confirmed. Trijnstel_talk 17:48, 6 May 2013 (UTC)

Kabupatentolikarapapuabarat

view • edit • history • watch
Filed: 09:06, 14 May 2013 (UTC)

• Kabupatentolikarapapuabarat (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Jigarrynorea (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Komunitastolikara (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: A match is very probable: same crosswiki-spam habits, same words used ("tolikara papua indonesia"), same write-only behaviour. I can't even realize who can be considered the "master" account. Two of them were also blocked on Wikidata, however I'm requesting a CU here, since Commons seems to be the most damaged project. A CU should also help Stewards setting some global blocks for those IP ranges. --Ricordisamoa 09:06, 14 May 2013 (UTC)

Results

The following are all Likely the same user.

• User:Kabupatentolikarapapuabarat - Previously blocked indef by Denniss
• User:Jigarrynorea - Previously blocked indef by Denniss
• User:Komunitastolikara - Previously blocked indef by Denniss
• User:Tolikaraindonesia - Blocked indef by me

.     Jim . . . . (Jameslwoodward) (talk to me) 12:28, 14 May 2013 (UTC)

Probably time to run another check. I suspect (at least) these new accounts are also related:

• Kotatolikarapapuaindonesia (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Tolikarawone (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

—LX (talk, contribs) 18:24, 20 May 2013 (UTC)

Yep, Confirmed. Tolikarakondaga (talk · contribs) is also related to the above sockpuppets. Trijnstel_talk 20:59, 20 May 2013 (UTC)

For reference, w:en:Wikipedia:Sockpuppet investigations/Alorkalabahi/Archive and Wikidata CU. --Rschen7754 18:25, 21 May 2013 (UTC)

Sendker

view • edit • history • watch
Filed: 22:35, 19 May 2013 (UTC)

• Sendker (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Overberg (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• 93.219.141.235 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

• 93.219.136.203 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

Rationale

• Reason: User:Overberg, who crossed my way when I dealt with some of his strange deletion-requests, shows the same edit characteristics as User:Sendker. Both very often use as edit-summary "erg"[6] [7], which is rather uncommon and probably an abbreviation for the German "ergänzt" (engl. completed). Both share an interest in river Glane in Germany. Sendker has uploaded 2 Glane-related images, Overberg has uploaded 4 such images.
  More importantly, which is also my reason for this request, both have filed deletion-requests for own uploads which are obviously abusive. For example, User:Sendker filed his year 2006-upload File:Ladberger Mühle.jpg on May 12, 2012 for deletion[8] due to "Rückzug ich will nicht mehr" (engl. withdrawal, I don't like anymore). When advised to file a DR, he claimed "badname"[9] on May 20, 2012, but didn't provide another name/file. On May 2013 he filed it again for speedy[10] due to "Urheberrechtsverletzung meinerseits" (engl. copyright violation by me).
  User:Overberg shows an identical behaviour. He filed his recent upload File:Glane.JPG for deletion, first due to "my own"[11], then due to "Urheberrechtsverletzung meinerseits"[12], using the identical wording as Sendker. After the DR Commons:Deletion requests/File:Glane.JPG had been opened by a different user, he expressedly assured me of committing a copyright violation[13], whereby I voted for deletion in the DR, before I became aware of the similarities between the 2 accounts.
  Note: User:Sendker had been indef-blocked on :de already in 2010 for sock-puppeting[14]. --Túrelio (talk) 22:35, 19 May 2013 (UTC)

Results

• Nice catch. All are definitely Confirmed - he editted once from a public library (so obviously some collateral there - but that's OK) and elsewhere from other IP addresses, but otherwise no more clear sockpuppets as far as I can see. I can't block an IP address though, so if you decide to block, you can only block the accounts. Trijnstel_talk 15:54, 20 May 2013 (UTC)

Thanks. --Túrelio (talk) 16:03, 20 May 2013 (UTC)

Archives

• For requests that are older than seven days, please see Commons:Requests for checkuser/Archives