Steward requests/Checkuser/2023-01

Please do not post any new comments on this page. This is a discussion archive first created in January 2023, although the comments contained were likely posted before and after this date. See current discussion.

Requests

Latest comment: 1 year ago47 comments10 people in discussion

影武者@zh.wikipedia

Status: Done

List of users: 侯友宜的野望 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 侯導的野望 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 侯友宜跟李登輝一樣是台灣籍人士而男系子孫斷絕！ (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 侯友宜 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 棄賴保侯 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 侯友宜才是李登輝的接班人 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 侯友宜總統 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 紅藍白營共主侯導 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 恭賀侯導成為2024年台灣大頭目侯選人！ (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/影武者

Reason(s): Sockpuppets ducked of w:zh:LTA:KAGE. A CheckUser is requested to find and block underlying sleeper accounts and IP ranges for the mass sock groups vandalising zhwiki in the past day or so. Emergency matter, pinging the two most active stewards familiar with zhwiki CU, @Sotiale and AmandaNP: your prompt help will be needed. --Luciferian Thomas 10:25, 1 January 2023 (UTC)

Confirmed 黃樹滋, 侯友宜的野望, 侯導的野望, 侯友宜跟李登輝一樣是台灣籍人士而男系子孫斷絕！, 民主進步黨會拋棄賴清德而保障侯友宜, 侯友宜, 棄賴保侯, 侯友宜才是李登輝的接班人, 侯友宜總統, 紅藍白營共主侯導, 寒吉是侯導的粉絲, 恭賀侯導成為2024年台灣大頭目侯選人！, 侯導大戰賴神, 越南刺客, 侯導要戰2024, John David Kinch Obama, 我愛侯導, Benedict Obama, 侯導, 越南更新革命黨金牌刺客, 金草包萬安, 蔣萬安偽市長

From a technical point of view. Necessary measures will be implemented soon. --Sotiale (talk) 12:10, 1 January 2023 (UTC)

[email protected]

Status: Done

List of users: Mtxvt (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Gorgomnoide (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Itleda (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Rajatre (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): it's me again, asking you to check yet another possible sock puppet of our most insistent vandal. Please see if Mtxvt is the same person as the other ones listed above. Thanks.

ValJor (talk) 03:20, 27 December 2022 (UTC)

Please remember that each time you come to SRCU for a check, you need to present evidence that the users are the same in order for a check to be done. I was able to find grounds to do the checks on my own, but those checks did not find Mtxvt in the mix. Therefore unless more evidence is presented, I will not be checking that account. I will leave this open for a few days in case you wish to do so.

Confirmed Gorgomnoide, Invernoeternal, Rajatre, Stale Itleda, Declined Mtxvt -- Amanda (she/her) 04:33, 27 December 2022 (UTC)

Hi Amanda!

Sorry about that; I have been dealing with Sotiale (see links below) for these requests, that is why I did not provide more information on this ongoing attack at pt.wikt.

Basically this vandal creates a sock puppet and for a few days does apparently harmless contributions to the project, he follows all the rules and all, but then, when he feels that he is "safe", he starts vandalizing entries and when caught in the act, he starts berating and insulting other contributors and administrators.

This Mtxvt account is apparently his latest installment, his contributions share strong similarities with those of the other confirmed puppets, but I wanted technical confirmation before I block him. Please proceed with the check.

Also, can you explain to me (or point me to a page where that is already explained) why those with CU powers are so unwilling to use those powers? I don't mean this as disrespect to you and the other CU's, but I see this behaviour all the time and it puzzles me. If I had the power to check for sockpuppets, I would use the hell out of it, just in case. In pt.wikt we had cases of vandals leaving accounts dormant for years before they used it to attack the project, so I feel it is justified to take preventive measures. If I could I would write an app to automatically check absolutely every new user, just in case. Why risk having a sleeper in our midst when you can easily avoid that?

Thanks.

--ValJor (talk) 11:16, 27 December 2022 (UTC)

Thanks for your reply, but it is still lacking. I saw the other requests last night when I looked over this, that's what allowed me to check the three I mentioned. Could you please provide diffs between Mtxvt and one of the socks that shows this similar behavior. Right now it's hard to tell the difference between Mtxvt and a normal editor.

The reason we take this so seriously is because each time we checkuser someone, we know the city and the country they edit from. Sometimes we can even get information down to a community or an address. This is an invasion of a users privacy. We have to balance the need to deal with a user and invading their privacy. If they are unrelated, then we have looked at their personal information for no reason. That's why it needs to be justified. It's also a legal obligation of the Privacy policy, CheckUser policy and ANPDP. Those pages might have some more answers for you as well. -- Amanda (she/her) 19:13, 27 December 2022 (UTC)

Hi Amanda!

"Right now it's hard to tell the difference between Mtxvt and a normal editor". That is exactly the point. This vandal does contributions that are apparently alright, he does that for a few days, sometimes weeks before showing his colours. If you check Itleda's contributions (link below) you will see that he did hundreds of harmless contributions before starting doing damage to the project. I'm currently reviewing all his contributions to try and separate the wheat from the chaff. Had I received early warning about him, the amount of work would be an order of magnitude smaller.

That being said, here are a few of the things that made me suspicious of Mtxvt:

adding a pt section for words that are originally in English and barely used in Portuguese like "goodwill", "coffee break", "crumble" and others; the other sock puppets in this series have done that extensively as well;
adding entries for obscure words like "catabolizar", "vorticismo", "plastinar"; again, the other puppets did a ton of that;
for a new user, he seems to know exactly how the entries should be formatted; true new users usually make a few mistakes and need some guiding on how to create entries, but this one added/modified more than a dozen entries following all the guidelines of the project;
also, new users will add two or three entries in a day, not a dozen in less than two hours;

For all that I'm almost ready to block him, even if you don't do the CU, but I would prefer to have tech confirmation, just in case I'm being paranoid (after all, there is a vanishingly small chance that he is a normal user...).

Mtxvt Unlikely -- Amanda (she/her) 04:01, 2 January 2023 (UTC)

Scoundrel [email protected]

Status: Done

List of users: Scoundrel 30 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Μεσισοπάλ (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jornatto (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): The same vandal once again, from the Greek Wiki. Check for sleepers if possible, as well. Thank you in advance and Happy new year! Ιπποκράτης2020 (talk) 17:13, 1 January 2023 (UTC)

There is no sorting through the mess on that IP range without hitting false positives, especially since I don't know the language. I have blocked the IP range involved for the time being. It will stop the new accounts. You'll still have to block the few remaining old ones. But it should quiet things down for a good while. -- Amanda (she/her) 04:12, 2 January 2023 (UTC)

Thank you very much Amanda, I will notify the greek admins. Ιπποκράτης2020 (talk) 11:22, 2 January 2023 (UTC)

Boogi [email protected]

Status: Done

List of users: Boogi wu (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/Boogi_wu

Reason(s): This user has been highly suspected of editing while logged out, reverting other user's edits to their own version. A check is requested to confirm if the user has been editing while logged out, and we request that suitable measures be applied (local or not) to block such behaviour. Thank you! --Luciferian Thomas 17:07, 3 January 2023 (UTC)

The situation has been looked into. -- Amanda (she/her) 02:26, 4 January 2023 (UTC)

I would only ask about if there is a case of IP abuse. You need not (and shouldn't) tell me the IPs involved. Luciferian Thomas 02:31, 4 January 2023 (UTC)

And I'm going to decline to disclose. The more I say, the closer I come to connecting IPs which I want to stay as far away from as possible. The user will have to appeal to stewards if they wish to be unblocked, so the user can be made aware of my concerns at that time. I understand that leaves the community blind about the users actions but knowing the answer wouldn't change the administrative action that can be taken. -- Amanda (she/her) 03:10, 4 January 2023 (UTC)

Jjff1@pswikipedia

Status: Done

List of users: Jjff1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Zzuupk (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): See page history. Cross-wiki promotion of a subject done with a new account. All accounts in the page history have been g-locked. Likely lock evasion. ~Styyx^{Talk? ^-^} 08:06, 4 January 2023 (UTC)

LWCU was sufficent to handle the problem, and not shockingly, it's the same person. -- Amanda (she/her) 15:03, 4 January 2023 (UTC)

擁有知識的柯南@zh.wikipedia

Status: Done

List of users: 擁有知識的柯南 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 漂亮公主 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/擁有知識的柯南

Reason(s): Account 2 seems to be an SPA participating in the DYKC poll and AFD entries account 1 also participated in. The SPA with only 3 edits are insufficient for a simple duck, with no explicit sign of sockpuppetry apart from the SPA's 3 edits. A check is requested to see if the accounts are related, and also please check if these users have been editing logged out. --Luciferian Thomas 15:13, 6 January 2023 (UTC)

Confirmed. Also, [1] is sufficient to do the duck test with without requiring my CU comment. -- Amanda (she/her) 15:50, 6 January 2023 (UTC)

[email protected]

Status: Not done

List of users: Omphalographer (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Kaldari (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Per a request from checkuser, "Well, for such a cross-wiki check to be possible, I must first provide a sufficient and appropriate rationale to the checkuser team on commonswiki. Since Kaldari is the sysop on commonswiki, I should be very clear about this. But I'm not sure about your explanation. If you believe this investigation is necessary, please discuss it first with your community that can better understand the context of this case before requesting it." --Sotiale (talk) 00:38, 12 December 2022 (UTC), url=https://meta.wikimedia.org/wiki/Steward_requests/Checkuser/2022-12#[email protected], I contacted several contributors to Wikiversity on 20 December 2022. Based on the evidence as presented at that time, see url=https://meta.wikimedia.org/w/index.php?title=User:Marshallsumter&oldid=24262495, a contributor stated in a private email: "I've read over all the materials and I will have to concur with my fellow checkusers that this isn't very compelling evidence. A recent check already came up clean, so at this stage you need rock-solid evidence to warrant yet another check. The situation you describe sounds like it could easily be mere coincidence."

Reason(s): Based on the coincidence analysis presented on my user page, User:Marshallsumter#Omphalographer-Kaldari coincidences, it is beyond reasonable doubt that User:Omphalographer is a single purpose sockpuppet account, often used for disparagement, of User:Kaldari currently editing on Commons. --Marshallsumter (talk) 15:56, 23 December 2022 (UTC)

Coincidence counting is a way to separate a rare event from ordinary events, background or noise, by improving the signal-to-noise ratio to the extent that a rare event can be studied, without removing the ordinary, noise or background, completely. See w:Coincidence counting (physics). --Marshallsumter (talk) 12:14, 28 December 2022 (UTC)

Per the duck test, "The duck test does not apply to non-obvious cases. Unless there is evidence which proves otherwise beyond a reasonable doubt [such as above], editors must assume good faith from others." --Marshallsumter (talk) 05:59, 31 December 2022 (UTC)

A cross-wiki check is requested to confirm that Omphalographer is a sock puppet of Kaldari either by IP match (IPs not to be disclosed, of course) or by close geographic proximity such as Berkley, California, and Oakland, California, close enough to be likely sock puppet and owner. Or, San Francisco, California, versus Austin, Texas, for example, does not confirm unless both sources are very near or inside Natural History Museums where spiders can be studied and photographed. Just FYI but neither User:Vox Brevis nor User:Omphalographer have uploaded images of spiders to Commons or Wikiversity. But both sock puppets were used for disparagement. --Marshallsumter (talk) 07:28, 4 January 2023 (UTC)

Both Omphalographer and Kaldari have been on Commons in December 2022, but the Commons Checkuser did not check because neither has been abusive on Commons. --Marshallsumter (talk) 07:34, 4 January 2023 (UTC)

If confirmed or likely I am requesting a block of Omphalographer on Wikiversity. We do not have Checkuser. --Marshallsumter (talk) 07:47, 4 January 2023 (UTC)

Please check latest entry to User:Marshallsumter#Omphalographer-Kaldari coincidences, 99% certainty means you don't need to check with Commons/Checkusers! --Marshallsumter (talk) 20:28, 6 January 2023 (UTC)

Marshallsumter, I'm afraid I can't help you since I have no rights to anything outside en-wiki. Drmies (talk) 23:07, 7 January 2023 (UTC)

Ok, lets be clear since this is your 4th time requesting action against this user. 1) The CU check is

Declined - do not request it again 2) Kaldari has not edited WV in over 2 years. Omphalographer only registered this year. Even if they were the same, which I am not saying they are, they would not be violating any policies at WV or globally 3) Your evidence on your userpage is really difficult to decipher - but we are still not going to review it either way because of my point above. -- Amanda (she/her) 05:10, 9 January 2023 (UTC)

Just FYI - secondary accounts are allowed almost everywhere on WMF projects which I assumed you knew. If you had reviewed the coincidence test you would have found at least 25 incidents of violation of WV:CIVIL, a policy, by these two which are blockable offenses. Not being civil is blockable also on meta. The coincidence test or counting demonstrated both incivility and voting twice on an issue among other things thereby sock puppetry, which with incivility are violations of policy every where. --Marshallsumter (talk) 06:25, 9 January 2023 (UTC)

Hhyu1@pswikipedia

Status: Done

List of users: Hhyu1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Ze221 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jjff1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): New accounts making edits related to Frotans (prev. CU). Ze221 hasn't edited on pswiki, but has removed the CSD tag of Jafar Frotan on several wikis, and also edited the talk page of Frotan on ckbwiki together with Jjff1. So check Hhyu1 on pswiki and Ze221 on ckbwiki. ~Styyx^Talk? 20:11, 9 January 2023 (UTC)

Confirmed Hhyu1 = Jjff1

Possible Ze221 - I'm not comfortable locking without more evidence.

-- Amanda (she/her) 01:44, 10 January 2023 (UTC)

右孔丘@zh.wikipedia

Status: Done

List of users: 岑寶兒19780906 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 周恩來18980305 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 黃周漢魏 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 梁烈唯19790326 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 李清雲16770226 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 邱香中 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 右右右右 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); TVB19671119 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 張國權19890115 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 左邱 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/右孔丘

Reason(s): LTA 右孔丘 mass account group, sleeper check is requested by local sysop to find underlying accounts. Stewards please also action on IP ranges if needed. --Luciferian Thomas 02:07, 10 January 2023 (UTC)

Everyone found in a sleeper check. All listed and not listed locked. Rangeblock feasibility is not good right now. -- Amanda (she/her) 04:16, 10 January 2023 (UTC)

Abdul Wahild [email protected]

Status: Done

List of users: Abdul Wahild Kalam (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Имран Джубайлович Султанов (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/Abdul_Wahild_Kalam

Reason(s): User editing actions similar to the Abdul Wahild Kalam from 2022-10 and 2022-12, but has a long editing history. A check is requested to confirm the relationship of the accounts. Thanks! --Luciferian Thomas 11:03, 10 January 2023 (UTC)

Confirmed Имран Джубайлович Султанов, Yanglandu, Yangfuture

Confirmed Abdul Wahild Kalam

From a technical point of view. --Sotiale (talk) 11:40, 10 January 2023 (UTC)

[email protected]

Status: Done

List of users: SoryMrr (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Fun89 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Doros89 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: ro:Wikipedia:Checkuser

Reason(s):

Fun89 and Doros89 are proved clones that were publishing automated translations on film related topics. SoryMrr writes longer articles, but the topic and the use of automated translation engines are similar between them and the other accounts. So it's a slight DUCK situation but I'd like to make sure.

. Gikü (talk) 19:03, 10 January 2023 (UTC)

Confirmed XSoryx & SoryMrr
Stale Fun89 & Doros89 -- Amanda (she/her) 23:38, 10 January 2023 (UTC)

[email protected]

Status: Done

List of users: Liruqi (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 析石父 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/Liruqi

Reason(s): Account 2 became active while account 1 was temporarily blocked. Both users have a tendency to fix "broken" wikitable syntax. Neither wills to talk. A check is requested to see if the two users are related. --Luciferian Thomas 06:08, 14 January 2023 (UTC)

Unrelated Liruqi and 析石父

From a technical point of view. --Sotiale (talk) 06:20, 14 January 2023 (UTC)

鐵路[email protected], 離心力青蛙@zh.wikipedia

Status: Done

List of users: 鐵路1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); CK124 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); 就這樣吧吧 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): It has been brought to the Village Pump on zhwikipedia that new account CK124 has been deleting content tagged for deletion by rollbacker 鐵路1. Upon further inspection I find that account 2 seems more likely to be w:zh:LTA:FROG (離心力青蛙) stalking user edits and as well abusing notability reporting procedures from its proficiency at notability reporting as a fully new account. Attached account 3 as a reported likely sock of LTA:FROG for comparison. Please check if account 2 is related to either the rollbacker or the LTA. With thanks, --Luciferian Thomas 15:12, 12 January 2023 (UTC)

Does that mean the third account 就這樣吧吧 is definitely LTA:FROG? Please explain more clearly the relationship between 鐵路1 and CK124 and how they relate to LTA:FROG. Thanks. --Sotiale (talk) 06:29, 14 January 2023 (UTC)

The third account is not definitely but very most likely LTA:FROG. CK124 participated in discussions that 鐵路1 did, but acts like LTA:FROG, being familiar with notability from first edit; 鐵路1 is nowhere like LTA:FROG. So it would be a case of either A == B or B == C and probably not A == B == C. Luciferian Thomas 06:50, 14 January 2023 (UTC)

Premise of the results
鐵路1 has not been investigated directly because it is not sufficiently explained.

CK124 and 就這樣吧吧 are investigated directly, and information on 鐵路1 is indirect.

The results
就這樣吧吧 is Likely to be users previously identified as FROG.

It was difficult to find similarities in data with CK124. ( Unrelated)

鐵路1 has the same ISP as 就這樣吧吧, but there are so many users using this ISP, and it was difficult to find data similarities with very limited data. ( Unrelated with very limited data, low reliability)

From a tehcnical point of view. --Sotiale (talk) 09:23, 14 January 2023 (UTC)

Thanks. May I confirm that sleeper accounts have been checked (and none found) for the directly investigated users, correct? Luciferian Thomas 10:47, 14 January 2023 (UTC)

Generally yes. This means that there were no accounts that looked similar to them, at least in the adjacent ranges. --Sotiale (talk) 11:15, 14 January 2023 (UTC)

[email protected]

Status: Done

List of users: A1Cafel (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); A1Cafel (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/A1Cafel

Reason(s): ZhWP templateeditor+patroller+rollbacker A1Cafel has been recently checked by Krd and blocked in Commons for IP abuse (c:Commons:Requests_for_checkuser/Case/A1Cafel). The user is also indefinitely blocked on enWP for the same reason. Upon further inspection of IP ranges reported by Commons users, I have noticed that there have been multiple suspicious sockpuppetry instances in the past, e.g. where an IP user in the reported range would leave a comment and then the user would close the AFD shortly afterwards. Endorsed by a local sysop and another clerk, an IP abuse check is requested on this user. Would stewards please check if the user has been editing logged out, especially in the Project (WP) namespace. We do not request or require blocks on such IPs, we only request on "whether this user has abused IPs sockpuppets, lately and over time as data supports". --Luciferian Thomas 05:14, 20 January 2023 (UTC)

If allowed, please also report the approximate number of instances of IP abuse found. Thanks! Luciferian Thomas 05:24, 20 January 2023 (UTC)

It is true that this user did non-login edits. This user used several regular ranges, but no edits were found in 维基百科: namespace, and it seems that there was only one discussion participation (in 90 days); this was a request to undo actions taken by the admin. Other than this, everything is edited in (main), and this is over 50 in total, but less than 150. --Sotiale (talk) 13:17, 20 January 2023 (UTC)

Plessas [email protected]

Status: Done

List of users: Plessas S. (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Nikos218 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Example

Reason(s): The person in question created an account recently and is currently engaged, as happens with Nikos218, in single-themed edits on Greek royalty and ex-King Constantine Glücksburg, in a manner that suggests prior experience with the project. The second user follows similar edit patterns and engages in similar discourse, supporting Plessas S. in arguments and edit summaries. [2] They both communicated in the first user's talk page, with a reply being being published less than a minute later. [3][4]. QuintusHaterius (talk) 19:14, 21 January 2023 (UTC)

Unrelated Plessas S. and Nikos218

From a technical point of view. Whether it's meatpuppet or not, at least technically it's unrelated. --Sotiale (talk) 04:26, 23 January 2023 (UTC)

Abdul Wahild [email protected]

Status: Done

List of users: Aziz nurovich osmanyev (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Имран Джубайлович Султанов (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Afvrd (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/Abdul_Wahild_Kalam

Reason(s): Last checked in Special:Diff/24346845#Abdul Wahild [email protected], another sockpuppet account found but registered in Feb 2022, therefore a sleeper check is requested. --Luciferian Thomas 02:52, 25 January 2023 (UTC)

Confirmed Aydin Aman, Svcvsddvdcv, Aziz nurovich osmanyev, Salah Hulusi, Zakir aslanovich azizyev, Afvrd, Tigerzengnmsl, Mdzztigerzeng, Aziz Victorovich Salimov, Azizan Afridi, Имран Джубайлович Султанов, Yanglandu, Yangfuture

Confirmed Abdul Wahild Kalam

They're using VPN and proxies.

From a technical point of view. --Sotiale (talk) 04:32, 25 January 2023 (UTC)

Saka [email protected]

Status: Done

List of users: Saka turkic (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Noyellowman (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/Saka_turkic

Reason(s): Both accounts participated in editing of the same articles, and the second account apparently reverted another editor's reverting of the first accounts edit. The second account also responded to the editor's response to the first accounts comment on a talk page. After a quick investigation I noticed that one only uses mobile VisualEditor and the other only uses desktop VisualEditor, this could be evidence of sockpuppetry with different devices. --Luciferian Thomas 15:03, 26 January 2023 (UTC)

Confirmed Saka turkic and Noyellowman

They're using VPN.

From a technical point of view. --Sotiale (talk) 15:23, 26 January 2023 (UTC)

[email protected]

Status: Done

List of users: 2022最棒 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hee Leong (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:zh:Wikipedia:傀儡調查/案件/LeonChow99

Reason(s): Another LTA:LC99 sockpuppet has been identified, seemingly registered right after the previous check. Also, the second listed account was confirmed in a previous check (24225661), yet is still roaming around multiple wikis, please consider global locking. --Luciferian Thomas 15:08, 26 January 2023 (UTC)

Confirmed Group 1: 2022最棒, Liong Sik, 一条心, Sayaanakmalaysiaboleh

Likely Hee Leong and Group 1

From a technical point of view. --Sotiale (talk) 15:29, 26 January 2023 (UTC)