Jump to content

Commons:Requests for checkuser

From Wikimedia Commons, the free media repository

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed  Technically indistinguishable
Likely  Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust. 8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing…  Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.


Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Checkuser requests to be listed (empty)
nothing found

Requests

[edit]

Tbcamishagentyal

[edit]

Status: open • view • edit • history • watch
Filed: 01:14, 22 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: The contribution is similar, Finance.balaji.jmd uploads spam advertising images. Astrinko (talk) 01:14, 22 April 2025 (UTC)[reply]


Dooxcc22

[edit]

Status: open • view • edit • history • watch
Filed: 22:13, 20 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

They both vandalized file:Flag of the President of Brazil.svg and I blocked them for a week. But if they are related, then they must be blocked for longer time. Taivo (talk) 22:13, 20 April 2025 (UTC)[reply]

I would say Confirmed that

are the same and very likely

is the same as the other two. The Squirrel Conspiracy (talk) 22:44, 20 April 2025 (UTC)[reply]

@Taivo: I've blocked them all. Please check Asdgg56's edits, as they haven't been reverted. The Squirrel Conspiracy (talk) 22:45, 20 April 2025 (UTC)[reply]
✓ Done. Reverted. Taivo (talk) 11:39, 21 April 2025 (UTC)[reply]

Spiridon Ion Cepleanu

[edit]

Status: open • view • edit • history • watch
Filed: 12:05, 18 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: The above accounts were recently blocked on frwiki following a RCU. Since this sockpuppeteer uses different accounts to contribute on different projects, and some sockpuppets could not be proven on the French project, having too old contributions or being just dormant on that project, a local check might identify other accounts used for the same purpose here (maybe Special:Contributions/Qualimac?). In a farewell message from one of the blocked accounts, the user mentions that the IPv6 address used lately was 2A01:CB1C:82C7:7700:0:0:0:0/64, which has numerous contributions on commons too. A partial picture of the interaction between the most active of these accounts can be found here (many other files have been deleted in the meantime). There is already a Category:Sockpuppets of Spiridon Ion Cepleanu, incomplete - could it be merged with Category:Sockpuppets of Spiridon MANOLIU, who is the same person? --Pafsanias (talk) 17:58, 18 April 2025 (UTC)[reply]


Bertrand101

[edit]

Status: resolved • view • edit • history • watch
Filed: 19:36, 16 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: All mentioned account uploaded hoax station/network file or created related category, duck for en:Wikipedia:Long-term_abuse/Bertrand101 (also see Special:Contributions/DWMA-AM and many many others), would like to see are there more accounts/sleepers by doing a CU, thanks. Aqurs1 (talk) 19:36, 16 April 2025 (UTC)[reply]

We are

Confirmed for:

and

Stale but blocked on behavioral evidence:

The Squirrel Conspiracy (talk) 21:36, 18 April 2025 (UTC)[reply]
More are

Confirmed

The Squirrel Conspiracy (talk) 22:01, 18 April 2025 (UTC)[reply]

Hom Ling Zum

[edit]

Status: resolved • view • edit • history • watch
Filed: 17:17, 13 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: User known for socking. New user recreating deleted file File:Flag of Mandalay.svg. Yann (talk) 17:17, 13 April 2025 (UTC)[reply]

Confirmed that the following are linked:

Most of these were already blocked, but they've been tagged as socks of Szm020730, Nv7801, and in one case Jurisdrew. The correct answer, I believe, is Nv7801. The Squirrel Conspiracy (talk) 01:55, 16 April 2025 (UTC)[reply]

@Yann, Achim55, Magog the Ogre, and Bedivere: Pinging filer and blocking admins so everyone knows that these are all Nv7801. Not sure if that means Nv7801 is Szm020730 or Jurisdrew; I'm not familiar with those. The Squirrel Conspiracy (talk) 02:17, 16 April 2025 (UTC)[reply]

Thanks for all checking. It would be interesting to know if Nv7801 = Jurisdrew. Yann (talk) 07:12, 16 April 2025 (UTC)[reply]
Currently not determinable. --Krd 07:59, 21 April 2025 (UTC)[reply]


Ricardinho da Souza Silva 7

[edit]

Status: resolved • view • edit • history • watch
Filed: 18:24, 12 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: I was just checking the photos one by one on an eswiki page. By checking the IP address' contributions (already globally blocked) I could find these accounts and I believe they are Ricardinho da Souza Silva 7. The behavior is the same on each account. --Stïnger （会話） 18:24, 12 April 2025 (UTC).[reply]

The following accounts are all either Confirmed or Likely based on technical data, but blocked and tagged based on that + behavioral evidence.

The Squirrel Conspiracy (talk) 21:23, 12 April 2025 (UTC)[reply]

@The Squirrel Conspiracy, you missed Tradixional and Polarizdor. Those accounts aren't locked or blocked. All the Best -- Chuck Talk 05:03, 13 April 2025 (UTC)[reply]
✓ Done The Squirrel Conspiracy (talk) 05:39, 13 April 2025 (UTC)[reply]
@The Squirrel Conspiracy: Can you check the following?:

As for the last one, it could be difficult to check for sure. --Stïnger （会話） 13:26, 14 April 2025 (UTC).[reply]


GMatteotti

[edit]

Status: open • view • edit • history • watch

[edit]

Rationale, discussion and results

[edit]

Reason: Interest in the same files, already blocked on itwiki as one of their socks. Last one identified here on Commons should be かたうら (talk · contribs). Titore (talk) 14:35, 12 April 2025 (UTC)[reply]

Blocked and tagged accordingly. I haven't reviewed their edits/uploads to see if there were any problems. If there are any, please take them to the appropriate admin noticeboard. The Squirrel Conspiracy (talk) 06:02, 13 April 2025 (UTC)[reply]

Blocked and tagged accordingly. The Squirrel Conspiracy (talk) 13:53, 13 April 2025 (UTC)[reply]


Slowking4

[edit]

Status: resolved • view • edit • history • watch
Filed: 17:37, 11 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: User's recent upload contributed "Slowking", which is the same attribution with the sock master. I doubt there may be relations between these two users. A1Cafel (talk) 17:37, 11 April 2025 (UTC)[reply]

added "Arnoseven", as it has the same interest in paintings sold at Sotheby's as "Frypie" and same naming convention for them . 0x0a (talk) 19:52, 11 April 2025 (UTC)[reply]
Confirmed That Frypie is Viscountessjennifer. I've blocked the latter, but not able to finish the check because something else came up that's going to keep me away from my computer for the evening. If another CU is able to take over, great. Otherwise, I'll continue this over the weekend. The Squirrel Conspiracy (talk) 02:28, 12 April 2025 (UTC)[reply]
Likely that Arnoseven is Dudsdons. I haven't taken any action on these accounts yet.
Deferred to I've reached out to a steward for advice on some of what I found. Leaving this open until that resolves. The Squirrel Conspiracy (talk) 05:34, 14 April 2025 (UTC)[reply]
@The Squirrel Conspiracy: Any news? Yann (talk) 22:35, 20 April 2025 (UTC)[reply]
@Yann: I've blocked the accounts that weren't blocked. The other things I found aren't pertinent to this case. The Squirrel Conspiracy (talk) 22:48, 20 April 2025 (UTC)[reply]
Thanks. I tagged the accounts, and will check the uploads. This case could be closed. Yann (talk) 22:55, 20 April 2025 (UTC)[reply]

Rehan Shahid Yaseen

[edit]

Status: resolved • view • edit • history • watch
Filed: 08:32, 4 April 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: These accounts are taken from the enwiki SPI case in which they have been confirmed (or at least blocked as suspected) to engage in sock-puppetry. See similarities between Rehan Shahid Yaseen's user page and Sheikh Rehan Shahid's. They all like to upload screenshot images of Pakistani politicians. Filing this here, because there is an intention to deceive the community and to make their uploads harder to track (there's already a DELREQ at Commons:Deletion requests/Files uploaded by Riyadh Ul Oud). Also there might be sleepers. 0xDeadbeef (talk) 08:32, 4 April 2025 (UTC)[reply]

Rehan Shahid Yaseen is stale, the other two are confirmed, with high Likely Al Badr Massa (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log ) also related. --Krd 05:56, 19 April 2025 (UTC)[reply]
For older requests, please see Commons:Requests for checkuser/Archives
Retrieved from "https://commons.wikimedia.org/w/index.php?title=Commons:Requests_for_checkuser&oldid=1023466219"