Steward requests/Checkuser/2010-10

Requests

Deva@el.wikipedia

  Confirmed Same IP addresses used on all three accounts, two different user-agent strings (one quite unique), but common to all three. Kylu 01:39, 18 October 2010 (UTC)

츄석@ko.wikipedia

  Comment Request created on the wrong page, reposting here. Original request added to archive, diff. Kylu 17:19, 18 October 2010 (UTC)
please check more user
  Comment The first ten accounts substituted '추'(choo) to '츄'(chu) in original words, and its intension is seemed to mentioning ko:사용자:Chugun. Second ten accounts are insulting Chugun by using sexual terms. --Mintz0223 05:30, 19 October 2010 (UTC)
Results

Group 2 and group 3   Likely.

Group 6, group 7 and group 8   Likely, and them and group 5   Possible. Group 4 and group 5   Possible. --Shizhao 13:31, 19 October 2010 (UTC)

Srimalpunchi@si.wikipedia

මීමා 03:06, 15 September 2010 (UTC)

  Comment To investigating Steward, I have reason to believe the petitioner themselves a sockpuppet of si:User:බිගුවා, and si:User:එළහරකා. If you demand I'll file a separate case. BTW the above discussion is for exactly to curb the unhelpful edits of this kind editors. Best--Chanaka L (talk) 07:07, 15 September 2010 (UTC)

::Chanaka L, If you want just make a request please. I don't want to be that much stupid. I have an account called mmnanuruddha(not using anymore). Other than that I'm clean. So go head. make a separate case. I can say 100% i'm not the si:User:එළහරකා neither මීමා. Also i'm beliving that will make your mind clean. I like that. -- බිඟුවා සාකච්ඡාව 10:44, 15 September 2010 (UTC)

I'm very sorry Chanaka L, Really sorry. you means බිගුවා & not me. my fault. I'll delete about comment. Yep. I Agee with you. -- බිඟුවා සාකච්ඡාව 10:55, 15 September 2010 (UTC)
  Abstain Home project. Kylu 11:49, 15 September 2010 (UTC)
User name7 Jiro Ono and user name8 ඵුස්සදේව have no matches found.   Confirmed the same IPs involving the first 6 users listed above, though they have had variable IPs at different times:
  1. User name1 Srimalpunchi = user name4 චතුනි අලහප්පෙරුම
  2. User name1 Srimalpunchi = user name2 රොමානිස් සැමුවෙල්
  3. User name3 සබර = user name6 දොන් මැනුවෙල් තිවංකා
  4. User name3 සබර = user name5 දසනැබළයෝ
Details are being sent to checkuser-l.Jusjih 23:37, 3 October 2010 (UTC)

Hoyojo@zh.wikipedia

The suspected users are follows:

Reason?--Waihorace 10:12, 25 September 2010 (UTC)
  Not done, see bellow. --dferg ☎ talk 13:44, 2 October 2010 (UTC)

Inhins@zh.wikipedia

--CDIP No.150 repair meter 14:17, 22 September 2010 (UTC)

Please also check Sdee (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser), since
  1. Since Ronochen and Inhins started to take part in votings, most of the votings are Sdee's DYK nominations, in all of which voted   Support. Additionally, in those Sdee's DYK nominations, some of them are faced many   Oppose, or are at the critical-point, or did not match the required number of   Support before Ronochen and Inhins voted; and then Ronochen and Inhins voted at Sdee's DYK nominations and changed the results.
  2. When Sdee and w:zh:user:Kalon have edit-war in the article w:zh:中央人民政府向澳門特別行政區贈送大熊貓, Inhins reverted Kalon's version to Sdee's version.
--长夜无风 16:12, 25 September 2010 (UTC)
Please help checking. User suspected violating voting rules with sock puppet. Thank you very much.--Wing 09:37, 30 September 2010 (UTC)
It doesn't look as if Sdee is related (differing IPs, useragent, etc...), though Inhins and Ronochen certainly are: They use the exact same version strings from the same IP addresses in an overlapping fashion. All three accounts use a certain anonymous proxy in common, but that's not really surprising, considering. Kylu 23:29, 3 October 2010 (UTC)
Thanks a lot, but I just didn't understand something here, "Sdee is not related, but all three use a certain anonymous proxy in common", what does such the situation mean? Are Inhins and Ronochen using only the proxy? How much is Sdee involved in the proxy? --CDIP No.150 repair meter 15:42, 4 October 2010 (UTC)

Πrate@zh.wikipedia

Results

  Inconclusive --dferg ☎ talk 15:30, 30 September 2010 (UTC)

cross-project spamming & sock-puppeting (a/cs @ zh.wikipedia)

Geroaff, Moneygiven343464, Moneygiven47278752, Ywtnss22 have global locked--Shizhao 14:33, 2 October 2010 (UTC)
No check needed IMHO.   It looks like a duck to me that they're all sockpuppets. Block on behaviour. Regards, --dferg ☎ talk 13:51, 8 October 2010 (UTC)

A2569875 and B2569875@zhwikipedia

Results

Нана-чян@uk.wikipedia.org

  Not done - Sorry, but we are not allowed to use CheckUser on ukwiki under the above explained circumstances. --dferg ☎ talk 14:12, 28 September 2010 (UTC)

Tokopolo1997@zh.wikipedia

Waihorace 12:02, 29 September 2010 (UTC)

________________________________________________
Results:


The following appear to be socks of each other from a technical standpoint. However, I don't read Chinese - hence I can't compare contributions, so you may want to look at them before taking any actions against them.


The following have either not edited zhwiki at all, or have not edited within the past three months, causing the checkuser query to return nothing:

The vandal has used some of his IP addresses to create a large number of accounts created over a long period of time. If the local administrators on zhwiki wish, I can block the IP addresses used for several months. It does not appear that anyone other than the vandal is editing from those addresses, so collateral damage should range from minimal to non-existent. J.delanoygabsadds 23:19, 30 September 2010 (UTC)

User:Shizhao global locked some account global already. --Waihorace 23:06, 1 October 2010 (UTC)

RiskAdverse@ms.wikipedia

Status:    Done

Hi, I am SYSOP from MS Wiki. Request to block IP address for * RiskAdverse (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser). Suspected to be mass vandal as previous attack based on same vandal type. Previous suspected sockpuppet used are ClearingHouse (24 Sep attack), Shah560, Lidl10, Datamonitor, MyExcellency ... a lot more. Yosri 00:37, 30 September 2010 (UTC)

Previous sockpuppet as follow (in no particular order):-

Results listed, would point out that non-IP data was checked against logs, and that data matches my previous results for Jubilee and Datamonitor, and their socks. IP blocked, no collateral damage within its /16. Kylu 01:07, 30 September 2010 (UTC)
Thank you for your assistant. Yosri 11:32, 30 September 2010 (UTC)

කච්චදේව@si.wikipedia

Only the fourth user doesn't have   Stale edits. And it is   Confirmed that the user (නන්දිමිතුරු) is sockpuppet of Srimalpunchi. Also, the users රොමානිස් සැමුවෙල් and චතුනි අලහප්පෙරුම are   Likely controlled by the same person. --FiliP ██ 09:53, 8 October 2010 (UTC)
Thanks for speedy investigation. I will report this in the local AN. Best--Chanaka L (talk) 11:06, 8 October 2010 (UTC)

Windup@mswiki

Status:    Done

Hi, I am SYSOP from MS Wiki. Request to block IP address for * Windup (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser) (10 Oct 2010) for sockpuppet Vandal. Suspected to be repeated vandal as previous attack based on same vandal type. Previous suspected sockpuppet used are ANJINGKURAP (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser) (4 Oct attack) Yosri 04:46, 10 October 2010 (UTC)

Same subnet, blocked /16, no collateral damage detected. Kylu 02:01, 12 October 2010 (UTC)