Steward requests/Checkuser/2024-08

Please do not post any new comments on this page. This is a discussion archive first created in August 2024, although the comments contained were likely posted before and after this date. See current discussion.

Requests

PearlyJwlSuvdaa@enwikivoyage

Status: Done

List of users: PearlyJwlSuvdaa (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Khongrroo (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Khash erdene35 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Sondor21 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Enhchimeg13 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Enkhkhaliun (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Anujin16 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hunshuvu.16 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: voy:en:Wikivoyage:Checkuser

Reason(s): These 8 users all came in yesterday afternoon with very similar editing patterns (creating out-of-scope articles, copyvio, poorly formatted) and all have refused to follow guidance provided by other users. It could very well be part of a teaching project, but many of the accounts in question edited at slightly staggered times. A CU check would be good to check if they are the same user(s) socking or if it's part of a genuine teaching project. --SHB2000 (t • c) 00:31, 2 August 2024 (UTC)

This is a bit difficult to interprete. They are all editing from the same area, but most have different ISPs and UAs, so it might be likely that, as you say, it is rather the question of an editing group.

Two of them, Hunshuvu.16 and Enhchimeg13 are

Confirmed (same UA and both were editing from the same dynamic mobile IP), but the rest are

Unlikely to be the same person. EPIC (talk) 09:02, 2 August 2024 (UTC)

Enhchimeg13@enwikivoyage

Status: Done

List of users: Enhchimeg13 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Chimgee13 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: voy:en:WV:CU

Reason(s): In a continuation of this request, Chimgee13 out of nowhere, creates voy:en:Tsagaan suvarga, which was originally created by Enhchimeg13 (blocked for socking) before it was deleted as being out-of-scope. Both usernames also similarly share the same number. I'm requesting a CU to check if this account also needs to be blocked for socking. SHB2000 (t • c) 13:11, 3 August 2024 (UTC)

Confirmed. Nothing else of interest found other than that. EPIC (talk) 13:36, 3 August 2024 (UTC)

Oyungerelsh@enwikivoyage

Status: Done

List of users: Enhchimeg13 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Oyungerelsh (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: voy:en:WV:CU

Reason(s): Similar to the last two CU checks, this account randomly appeared today, creating voy:en:Ulaan tsutgalan, which was previously created by Hunshuvu.16 (blocked for disruptive socking). --SHB2000 (t • c) 08:48, 4 August 2024 (UTC)

Possible - Same ISP and geographical area but different ranges and different UAs. If not a sock it's likely meatpuppetry. EPIC (talk) 12:09, 4 August 2024 (UTC)

[email protected]

Status: Cannot be undertaken

List of users: Torsva45 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Lauriswift911 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Th3Shoudy (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Foggy kub (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Kozaryl (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Foggy254 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Teodor342 ftk (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Xakasya911 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Cianzera911 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Czeraka (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: w:en:Wikipedia:Sockpuppet_investigations/Cianzera/Archive

Reason(s): As a result of the discussion, a number of accounts were globally blocked (Torsva45, Lauriswift911, Th3Shoudy) and a number were blocked in separate wikis. Czerka is being submitted for chek for the first time. I have concerns about this, as well as other reasons listed below.
The first reason. Often only the pages created by the user are always indicated on the user's page in different language versions of Wikipedia, i.e. it is always a rapidly replenishing list on similar topics (history of Kyrgyzstan, military topics, etc.). For example:
Torsva45 in enwiki;
Lauriswift911 in kywiki;
HOMIEZAVR in kywiki enwiki ruwiki.
The second reason. The subject of the contribution. Examples:
1) Special forces "Boru": The file uploaded by Torsva, the article "Boru (special forces unit)" created in ruwiki and the file uploaded by HOMIEZAVR;
2) The same contribution to the Commons and Wikipedia. If you compare the files uploaded to the Commons from the accounts listed here, you will see that most of them are related to military topics (signs of paramilitary institutions, military uniforms of Kyrgyz military units, etc.), Kyrgyz tribes, maps etc.
The third reason. The accounts were created at the same time or after the previous ones were blocked and begin to operate according to the same model.
The fourth reason. Insults similar to the Cianzera account (by the way, Cianzera911 will be created later for the place of the blocked account). Threats and insults from the HOMIEZAVR. For example, in the Kyrgyz Wikipedia, I do not know of such cases.

Bosogo (talk) 20:47, 4 August 2024 (UTC)

Unfortunately the data from all of these accounts has expired so unfortunately there is no data to compare with HOMIEZAVR. Therefore the check cannot be performed for now unless there are any more recent accounts (the CU data expires three months after latest edit or logged action). EPIC (talk) 21:15, 4 August 2024 (UTC)

[email protected]

Status: Done

List of users: Qazanxan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Goldenmath (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log

Reason(s): I think Qazanxan is another puppet account of the user participating in this discussion. The account was recently created, contributed to a few "Wikipedia" namespace pages and, after 4 days, participated in the discussion, expressing the same opinions as other puppet accounts in favor of keeping the article. --Sura Shukurlu (talk) 15:17, 5 August 2024 (UTC)

@Sura Shukurlu: There is no account named Goldmath at azwiki, but there is an account named Goldenmath (who participated in that discussion). I assume that is who you mean? If so then I could do this check, after looking myself it does seem like likely socking. EPIC (talk) 18:14, 5 August 2024 (UTC)

@EPIC, yes, it is. Sorry for the mistake. Sura Shukurlu (talk) 18:16, 5 August 2024 (UTC)

Thanks.

Unlikely from a technical point of view. If not a sockpuppet it's likely rather a question of meatpuppetry.

However, Goldenmath is

Confirmed to another account, Savant23 (which however has no edits). EPIC (talk) 18:25, 5 August 2024 (UTC)

[email protected]

Status: Already done

List of users: Qazanxan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): The new account and his contributions are almost on this page on AFD. It looks like he's the one here. Later, he opened several accounts and was blocked. Gadir (talk) 16:20, 6 August 2024 (UTC)

This check has already been performed, see Steward_requests/Checkuser/2024-08#[email protected]. So marking as

Already done. EPIC (talk) 16:26, 6 August 2024 (UTC)

Thank you! Gadir (talk) 16:39, 6 August 2024 (UTC)

Sanuthi [email protected]

Status: Done

List of users: Sanuthi Linux (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); க.சிறீராம் (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Selvasivagurunathan m2 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Sridhar G1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); AntanO2 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: local policy is same as en.wiki

Reason(s): More than 6 months a user engage in heavy vandalism in ta.wiki and en.wiki, and already a bulk of IDs were blocked globally. However, it does not stop. These IDs are blocked in ta.wiki and en.wiki. I would like to know is there any hidden/unrevealed IDs that belong to those socks. Note: Selvasivagurunathan m2, Sridhar G1, AntanO2 are imitating as sysop users in ta.wiki. Antan O 07:00, 8 August 2024 (UTC)

Confirmed This list. -- Amanda (she/her) 08:37, 8 August 2024 (UTC)