Commons:Requests for checkuser

From Wikimedia Commons, the free media repository
Jump to navigation Jump to search

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed  Technically indistinguishable
Likely  Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust. 8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing…  Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.


Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Checkuser requests to be listed (empty)
nothing found

Requests

[edit]

A3cb1

[edit]

Status: open • view • edit • history • watch
Filed: 21:41, 14 November 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Usual edit pattern, compare with Silini22 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log ).--81.41.176.97 21:41, 14 November 2024 (UTC)[reply]

Confirmed --Krd 07:18, 15 November 2024 (UTC)[reply]



Kaisen12

[edit]

Status: resolved • view • edit • history • watch
Filed: 18:08, 12 November 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: All appear to belong to an IP address in the 2001:8A0:6xxx... range. I believe these are sock/meatpuppets based on IP reverts removing deletion tags to the following files from 3 different accounts created very recently:

The main account has already have multiple images of the same footballer deleted for copyvio/missing information, while Endro12 has uploaded likely screenshots with minimal info, and Endro12 has uploaded a Getty Images photo claiming it as their own work. The IP addresses are removing tags without starting a discussion or providing useful source info. Adeletron 3030 (talk) 18:08, 12 November 2024 (UTC)[reply]

Also, please excuse me for not completely assuming good faith, but this deletion discussion involving 2 of the 3 users mentioned above feels very meat-puppet-y to me. Adeletron 3030 (talk) 21:46, 12 November 2024 (UTC)[reply]
I think is Likely that the following users are releated:
There may be more. None blocked or deleted so far, please comment on their behaviour.
The proposed master Barbaraskw (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log ) appears Unlikely to be related. --Krd 16:13, 13 November 2024 (UTC)[reply]
@Krd They removing valid speedy deletion tags from images while logged out (see edits linked above) and Kaisen12 comments on deletion discussion pretending to be a third party: see Commons:Deletion requests/File:KA2024.jpg and Commons:Deletion requests/Files Uploaded by User:Tonispin. In general, all of the linked accounts have a pattern of uploading obvious screenshots of web images/videos of Portuguese/Portugal-based footballers claiming ownership.
I realized after the fact that Barbarskw appears to edit Sweden-related articles (though they themselves appear to be part of a long-term sockpuppet tree) and the other accounts appear to be from Portugal. Their paths crossed paths because of edits to File:Viktor Gyökeres.jpg and File:Viktor Gyökeres 2024.jpg, a Swedish footballer based in Portugal. Adeletron 3030 (talk) 17:09, 13 November 2024 (UTC)[reply]
All blocked. --Krd 04:59, 14 November 2024 (UTC)[reply]

Tiago Diaz Meneses

[edit]

Status: open • view • edit • history • watch
Filed: 11:00, 13 November 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Reuploading copyright violation File:Vladimiro Montesinos en Lima.jpg using Flickr washing license here. Yann (talk) 11:00, 13 November 2024 (UTC)[reply]

After the file was initially uploaded by user Tiago Diaz Meneses, an IP added this link as a source with a date after the upload date on Commons. (Possible first attempt at washing license). --Ovruni (talk) 11:15, 13 November 2024 (UTC)[reply]
I tend to decline this per #1 and #2. Is there anything to add? --Krd 16:14, 13 November 2024 (UTC)[reply]
Do you mean that they are obvious socks? Yann (talk) 16:45, 13 November 2024 (UTC)[reply]
No, I'd say we usually don't run a CU on two accounts with one or two uploads each, as it's fair enough to warn and/or block them. As said, if I'm missing anything, please advise. Krd 17:00, 13 November 2024 (UTC)[reply]
One account reuploading a copyright violation in using Flickr license washing seems serious enough to me to have a CU. It is quite likely that the second is a sock of the first, but as the names are different, this can't be proved without a CU. If these are different users, a simple warning is sufficient, but if they are the same user, one should be blocked indef., and the other should get a serious warning. Yann (talk) 18:02, 13 November 2024 (UTC)[reply]

Although I don't feel strongly about it, I tend to agree with Krd. I think we should warn both accounts that using two accounts to edit the same file is a serious breach of Commons rules and that if that is the case here, they must not do it again. .     Jim . . . (Jameslwoodward) (talk to me) 17:09, 15 November 2024 (UTC)[reply]

Hi Jim, Sorry, but I don't get it. Either these accounts are related or they are not. There is no middle ground. If it is a coincidence that they uploaded the same copyright violation, and they are not related, a simple warning is sufficient as they only have one deleted file each. However, if they are related, it is clearly an abuse of multiple accounts in addition to Flickr license washing, so the sock should be blocked indefinitely, and the first account should get at least a serious warning, if not a block. Yann (talk) 20:31, 15 November 2024 (UTC)[reply]

Kagid616

[edit]

Status: resolved • view • edit • history • watch
Filed: 18:48, 12 November 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Spam accounts sharing the same pattern (uploading random images with spam links in the file desc) and sharing the same spam URLs (overlapping). --Achim55 (talk) 18:48, 12 November 2024 (UTC)[reply]

@Achim55, is there a reason that the master and some of the puppets aren't blocked? All the Best -- Chuck Talk 18:56, 12 November 2024 (UTC)[reply]
Yes, it's just for avoiding the song to be sung "All of them are blocked, nothing to do, CU is the last resort etc." as already happened... --Achim55 (talk) 19:56, 12 November 2024 (UTC)[reply]
Inconclusive --Krd 16:00, 13 November 2024 (UTC)[reply]

Tbcamishagentyal

[edit]

Status: resolved • view • edit • history • watch
Filed: 15:39, 11 November 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: All the accounts involved uploaded spam images advertising apartment/hotel buildings from India. Astrinko (talk) 15:39, 11 November 2024 (UTC)[reply]

Confirmed, blocked and nuked around 70 accounts. --Krd 16:00, 11 November 2024 (UTC)[reply]

Trent506

[edit]

Status: resolved • view • edit • history • watch
Filed: 14:35, 11 November 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Vandalism by reverting logo-related uploads and uploading selfmade hoax logos. Only by behavioral evidence I can't recognize if there is a connection to

or perhaps

or if it's another farm. Please check for sleepers, thank you. --Achim55 (talk) 14:35, 11 November 2024 (UTC)[reply]

Confirmed
--Krd 15:09, 11 November 2024 (UTC)[reply]
A new (hidden) log only abuse filter might be a good idea. All the Best -- Chuck Talk 18:57, 12 November 2024 (UTC)[reply]

Esthappanos Bar Geevarghese

[edit]

Status: resolved • view • edit • history • watch
Filed: 17:19, 5 October 2022 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: User has been uploading the same images of Syro-Malabar clergymen, tag-teaming with an IP to add these images to a number of EnWikipedia pages. As the images have been deleted for copyvios, I do not have diffs. ~ Pbritti (talk) 04:40, 9 November 2024 (UTC)[reply]

Inconclusive --Krd 15:26, 10 November 2024 (UTC)[reply]


Jermboy27

[edit]

Status:  to be archived • view • edit • history • watch
Filed: 17:06, 30 October 2024 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: These two accounts are fairly new, and started uploading dubious traffic signs, hallmarks of the Jermboy27 sockmaster. In particular, Duotorso uploaded File:MUTCD W11-6 (skiers).svg. A new edition of the MUTCD was just released last year and this image is not contained in it. The artistic style is also closer to that of traffic signs in Quebec. UltimateFawnald uplaoded File:आगे रोकें (India).svg, which is not contained within documents produced by the Indian Roads Congress. This makes them both highly suspect. Fry1989 eh? 17:06, 30 October 2024 (UTC)[reply]

The two accounts suspected of being sockpuppet have been globally locked, so the owners of the two accounts cannot log in to their accounts. Astrinko (talk) 12:32, 31 October 2024 (UTC)[reply]
Confirmed, all already blocked. --Krd 11:14, 1 November 2024 (UTC)[reply]
I have added a third account. I think it's self-evident. Fry1989 eh? 16:13, 4 November 2024 (UTC)[reply]
Confirmed Krd 14:41, 7 November 2024 (UTC)[reply]


For older requests, please see Commons:Requests for checkuser/Archives
Retrieved from "https://commons.wikimedia.org/w/index.php?title=Commons:Requests_for_checkuser&oldid=957135996"