Commons:Requests for checkuser

From Wikimedia Commons, the free media repository
Jump to navigation Jump to search

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed  Technically indistinguishable
Likely  Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust. 8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing…  Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.


Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Checkuser requests to be listed‎ (1 P)
Commons:Requests for checkuser/Case/Porsche with no brakes 69

Requests[edit]

Porsche with no brakes 69[edit]

Status: open • view • edit • history • watch
Filed: 05:12, 5 November 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: English Wikipedia vandal who was using VPN IPs to cover their tracks. I think it’s worth checking whether they used a VPN to create and use this account, which uploaded the images of erect penises used in the en-wp vandalism. Cheers, RadioactiveBoulevardier (talk) 05:12, 5 November 2023 (UTC)Reply[reply]

Ярмамедов Тимур[edit]

Status: open • view • edit • history • watch
Filed: 15:10, 1 November 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: First three accounts banned as VOA (uploading hand-drawn fictional flags/coats of arms, which were soon added to articles in Russian WP by that IP). Last one registered today and doing same thing as and looks same. ДолбоЯщер (talk) 15:10, 1 November 2023 (UTC)Reply[reply]

Hussainrani[edit]

Status: resolved • view • edit • history • watch
Filed: 16:08, 28 October 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: All three accounts uploaded pictures of the same Indian actors, all probably copyvios. Aryanmann21 may be stalled, but is added here for reference. Digitalberries created after a warning was sent to Hussainrani. Yann (talk) 16:08, 28 October 2023 (UTC)Reply[reply]

  • Confirmed that Hussainrani = Digitalberries. Aryanmann21 is indeed Stale. Эlcobbola talk 15:09, 31 October 2023 (UTC)Reply[reply]

Jurisdrew[edit]

Status: resolved • view • edit • history • watch
Filed: 14:33, 28 October 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: All accounts have been uploading historical revisions of various flags that really don't seem to have a purpose. They all follow the same basic naming patterns, such as changing "Flag of..." to "Flag Of...". They also established their user pages in the same pattern, first creating it and then immediately blanking it. Fry1989 eh? 14:33, 28 October 2023 (UTC)Reply[reply]

Han Mi Nyeo[edit]

Status: resolved • view • edit • history • watch
Filed: 16:30, 27 October 2023‎ (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

I suspect Demon201x (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log ) for possibly the @hanminyeo account. Currently, demon has 1. reuploaded my work: File:Flag of Riyadh.svg which was taken down due to copyright 200px

2 Reuploaded someone elses work:

3Reuploaded my friend's work: Flag of Suva.png 200px

4,5 & 6 Reuploaded THREE DIFFERENT VARIATIONS OF THE SAME FILE TO THREE DIFFERENT FILES (without author's permission (the original has been reverted back to correct file) Flag of Pointe-Noire, Congo.svg Flag of Pointe-Noire, Congo (Variant 1).svg Flag of Pointe-Noire, Congo (Variant 2).svg 200px 200px

7 Incorrectly marked a file for deletion as the other files existed even though this was an actual svg (not a wrapper) Flag of Pointe-Noire, Republic of Congo.svg 200px

8 Has numerous fake svg wrappers with some flags being a hoax: https://commons.wikimedia.org/wiki/Special:NewFiles?user=Demon201x Such as: Flag of Moroni, Comoros.svg 200px Flag of Port-au-Prince.svg 200px Flag of Paramaribo, Suriname.svg 200px

9 He also uploads fake svg wrappers of city flags too. 100px 100px 100px

10 HE HAS REMOVED THE DELETION REQUEST FOR THE FILE OF MORONI, COMOROS https://commons.wikimedia.org/w/index.php?title=File:Flag_of_Moroni,_Comoros.svg&action=history

11 He continually acts annoyingly as he asks me to add his files to pages so that possibly his files will be kept due to COMMONS:INUSE, even though i thorougly lectured him into why he should stop making these files.


Conclusion So uhhh yeah. Its been a weird journey through commons, and i hope his files are taken down as they violate copyright laws of people and commons today.

(NOTE: I have taken some action and some files have been deleted.) — Preceding unsigned comment added by Strenatos (talk • contribs) 16:30, 27 October 2023‎ (UTC)Reply[reply]

  • Known socks are Stale; there would be nothing to which to compare Demon201x. Strenatos, filing an RFCU in this state and failing to follow the the inclusion instructions are a disservice to CUs and those who assist with RFCU maintenance. Please follow the instructions at COM:RFCU in the future. Эlcobbola talk 18:52, 27 October 2023 (UTC)Reply[reply]


Youtubestart0[edit]

Status: resolved • view • edit • history • watch
Filed: 18:07, 26 October 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: All four accounts are uploading advertisements with a similar style and content (though each one is advertising a different website). Although w:en:Wikipedia:The duck test may apply, I suspect that there may be other accounts that I have not identified that could be found by checkuser instead. Marbletan (talk) 18:07, 26 October 2023 (UTC)Reply[reply]

I've added a fifth account, JamesRobert01. This user has uploaded a couple of files that have similar content, descriptions, and categorization as the uploads of the first four. I don't know how far back in time checkusers can look, but this one might be stale by now. Marbletan (talk) 12:40, 27 October 2023 (UTC)Reply[reply]
  • Confirmed, with others. As this appears a sock farm, Youtubestart0 (oldest account immediately visible) may or may not be the actual master. Future spam socks can be reported to ANB. Эlcobbola talk 14:51, 28 October 2023 (UTC)Reply[reply]
  • JamesRobert01 is  Not done, as their contribs appear fundamentally different. FWIW, they were also not on Youtubestart0 ranges. Эlcobbola talk 14:55, 28 October 2023 (UTC)Reply[reply]

Dr. Gorbachov[edit]

Status:  to be archived • view • edit • history • watch
Filed: 05:31, 21 October 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: Dr. Gorbachov was blocked at August 1 for one year because consistent uploading of dubious photos of Colombian politicians, but few days after appeared the suspected user, with the same goal as Dr. Gorbachov. The situation is quite suspicious because the photos uploaded by the suspicious user are used by Dr. Gorbachov on the Spanish Wikipedia, so there is apparent coordination (or sockpuppeting). Taichi (talk) 05:31, 21 October 2023 (UTC)Reply[reply]

Confirmed --Krd 04:39, 22 October 2023 (UTC)Reply[reply]

Devinwiki2023[edit]

Status: resolved • view • edit • history • watch
Filed: 01:18, 16 October 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: "one could guess (by behavioral evidence only) that User:DevinEH = User:Devinwiki2023 = User:Mangolia Shepherd = User:Sovereign Ultimate, perhaps also User:Tamas Palatinus Mark" per Achim55 in this edit.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 01:18, 16 October 2023 (UTC)Reply[reply]

Please see the checklist at the top of Commons:Requests for checkuser. Krd 04:52, 19 October 2023 (UTC)Reply[reply]
@Achim55: Please block them yourself.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 19:25, 22 October 2023 (UTC)Reply[reply]

Tahmidzaman[edit]

Status: resolved • view • edit • history • watch
Filed: 08:08, 13 October 2023 (UTC)

Suspected related users[edit]


Rationale, discussion and results[edit]

Reason: These users are involved in a long-time spamming and sockpuppetry, in which the earliest sockpuppet I have found by now is Tahmidzaman. The repeatedly uploaded spams include File:Jahid.jpg (uploaded by Jahid.hassan48, Jahidur Rahman Jahid, S M Jahid Hasan1971 and Mdjhjahid), File:Jahid.png (uploaded by S M Jahid Hasan1971 and Jahidhasan360), File:Jahid.jpg.jpg (later moved to File:Jahid.jpg) and File:Jahidul.jpg.jpg (uploaded by Jahid0055), File:Jahidul.jpg (uploaded by Hasanahmedx), File:Jahid hasan.jpg (uploaded by Jahid hasan16, S M Jahid Hasan1971 and Madian wiki), File:Jahid hasan.png (uploaded by Jahidhasan360), File:S M Jahid Hasan.jpg (uploaded by S M Jahid Hasan1971 and Smtvnews), File:S M Jahid Hasan.png (uploaded by Smtvnews1971), File:Bondho.png (uploaded by Tahmidzaman and Mdjhjahid). NmWTfs85lXusaybq (talk) 08:08, 13 October 2023 (UTC)Reply[reply]

  • All but Mdjhjahid, Madian wiki, Smtvnews, and Smtvnews1971 are Stale. Confirmed that Mdjhjahid = JahidHasanOfficial. Confirmed that Smtvnews = Smtvnews1971 = Md. Jahid Hasan Personal Wikipidia. Technically Likely is Madian wiki. Based on behaviour, for all accounts as a group,  It looks like a duck to me. Эlcobbola talk 16:15, 25 October 2023 (UTC)Reply[reply]

BHO8964[edit]

Status: resolved • view • edit • history • watch
Filed: 09:31, 9 October 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: Special:Contributions/BHO8964 and w:zh:LTA:KAGE --Solomon203 (talk) 09:31, 9 October 2023 (UTC)Reply[reply]

Nipponese Dog Calvero is not registered at Commons. Nothing to check. --Krd 04:41, 22 October 2023 (UTC)Reply[reply]
@Solomon203: I reported them on m:srg.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 19:22, 22 October 2023 (UTC)Reply[reply]

A3cb1[edit]

Status:  to be archived • view • edit • history • watch
Filed: 14:49, 26 September 2023 (UTC)

Rationale, discussion and results[edit]

Marlöng12 is 99% the LTA A3cb1 uploading again and again the same royalties picts. I've some doubts about Alanzx123, even if the kind of uploaded files is similar. Thanks --Ruthven (msg) 14:49, 26 September 2023 (UTC)Reply[reply]

Marlöng12 is high Likely. Alanzx123 is technically Unrelated. Krd 17:48, 26 September 2023 (UTC)Reply[reply]
I just added Älrentino, pointed to me by Friniate for his typical behavior. Can you check him as well? Thanks --Ruthven (msg) 12:36, 14 October 2023 (UTC)Reply[reply]
Confirmed Krd 05:00, 19 October 2023 (UTC)Reply[reply]



Abayomi01[edit]

Status: open • view • edit • history • watch
Filed: 03:25, 28 August 2023 (UTC)

Suspected related users[edit]

Rationale, discussion and results[edit]

Reason: The sockmaster has uploaded a good number of images, though some (such as File:Adrian Perez Ramirez.jpg, File:WhatsA Image 202f3-08-25 at 3.23.08 AM (2).jpg, File:Filmfinity.jpg, File:WhatsApp Imag 2023-08-25 at 3.16.53 AM.jpg, etc.) have been deleted for a number of reasons, including copyright and use of commons to advertise. The master was given a warning for uploading out-of scope files the morning (UTC) of 27 August, and was given another warning for advertising at 16:37 that same afternoon. After receiving these warnings, the sockpuppet account was created at 23:15 on 27 August and proceeded to re-upload photos that had previously been uploaded by the master and had been deleted for scope or copyright reasons (i.e. File:Adrian Perez Ramirez (2).jpg, File:Adrian Perez Ramirez (3).jpg, File:WhatsApp Imae 2023-08-25 at 3.23.08 AM.jpg). As such, I suspect that the two accounts are connected in some way.

If these accounts are run by the same individual, this would appear to be a case of evasion of scrutiny on one's own uploads after having received multiple warnings, which would amount to disruption of Commons via the abuse of multiple accounts. As such, I am requesting a checkuser examine these accounts to evaluate the extent of technical connection between them. — Red-tailed hawk (nest) 03:25, 28 August 2023 (UTC)Reply[reply]

These two are likely the same person. However this conclusion is subject to the same caveat as 서울출장 below -- they are two of at least a dozen accounts (including those listed under 서울출장 below) that are likely students at the same institution. While these two quack like the same duck, I doubt that all of them are the same person. I have blocked Gajifast.     Jim . . . (Jameslwoodward) (talk to me) 13:35, 28 August 2023 (UTC)Reply[reply]

Also noting Abayomi43, who was blocked by Mdaniels5757 and was confirmed to master at an EnWiki SPI. I'm indefing the master. — Red-tailed hawk (nest) 03:47, 30 August 2023 (UTC)Reply[reply]
And also Sulitake01, who in their first three uploads re-uploaded an image previously uploaded by master. — Red-tailed hawk (nest) 03:54, 30 August 2023 (UTC)Reply[reply]
Noting that Mariaman81, who joined Commons this morning, is also uploading similar WhatsApp/garbled filenames and another photo of Adrian Perez Ramirez (File:Adrian Perez Ramirez (3).jpg). Belbury (talk) 10:56, 1 September 2023 (UTC)Reply[reply]
I've also blocked Walikomu for doing the same sort of thing as described above.
@Jameslwoodward: Would it be possible for a rangeblock to work here, or would there be too much collateral?
— Red-tailed hawk (nest) 14:08, 1 September 2023 (UTC)Reply[reply]
For posterity sake, I'm going to also make note of Ticket:2023083110009876. — Red-tailed hawk (nest) 14:26, 1 September 2023 (UTC)Reply[reply]
Another new sock account at Obaraka2, a few minutes ago. Belbury (talk) 15:16, 4 September 2023 (UTC)Reply[reply]
For older requests, please see Commons:Requests for checkuser/Archives
Retrieved from "https://commons.wikimedia.org/w/index.php?title=Commons:Requests_for_checkuser&oldid=818586418"