Steward requests/Checkuser/2017-03

Please do not post any new comments on this page. This is a discussion archive first created in March 2017, although the comments contained were likely posted before and after this date. See current discussion.

Requests

Robert [email protected] and [email protected]

Status: Done

List of users: Robert Ia (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Mihai7 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: They are new here and there was no discussion yet, just their talk pages. However, see below the discussions for the clone farm to which they supposedly belong.

Reason(s): Both have registered a few days ago and exhibit a behavior pattern very similar to a huge clone farm that considerably disturbed the project last July; see [1]. One very bad case was a massive phishing attack against several administrators, launched from an open proxy, last November; see [2]. If these two new ones are confirmed against each other, there is a strong case for blocking. Victor Blacus (talk) 10:18, 11 March 2017 (UTC)

Confirmed:

Some of those are blocked but I've not checked for how long, you should take care of that and amend blocks as necessary.

Inconclusive /

Unlikely as if they're related to the previous reports you mention.

—Marco Aurelio 14:34, 11 March 2017 (UTC)

Thanks! Late addition:

Emilian1999 (talk • contribs • block • xwiki-contribs • xwiki-date ^(alt) • CA • ST • lwcheckuser)

Could you please check against the other two? -- Victor Blacus (talk) 14:58, 11 March 2017 (UTC)

I don't think I'd find any relation as I did not find any other accounts when doing the original request. This user also looks like a productive community member (just checked edits) and I am not sure how a check on that account would be appropriate without further information. Not done. —Marco Aurelio 15:05, 11 March 2017 (UTC)

I oversaw the fact that you had already checked those two. Sorry for having wasted your time. Thanks again! -- Victor Blacus (talk) 15:12, 11 March 2017 (UTC)

Бич Божи@bg.wikipedia

Status: Done

List of users: Бич Божи (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Британска Колумбия (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Университет на Йейл (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Stanimir X (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Sockpuppet policy, Specific article deletion discussion

Reason(s): These three editors have all taken one side on a deletion discussion. They are freshly registered and showing similar style. Even though two of them haven't cast votes (and the other one's vote was invalid anyway), our sockpuppet policy explicitly forbids using socks to give an impression of a wider support for certain point of view. The modus operandi is in fact strongly reminiscent of the prolific sockpuppet abuser bg:User:PavelStaykov / en:User:PavelStaykov, so I wouldn't be surprised at all if the following three and likely many, many more are also part of the same group:

Верховенски (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Прабългарски Войн (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Извънземен (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Many thanks in advance for helping us.
— Luchesar • T/C 05:34, 16 March 2017 (UTC)

In fact, I'd like to ask you here too for IP range(s) that we can block. This harassment gets practically unbearable as it wastes a huge amount of time for the administrators and the editors who patrol the recent edits. Together with the case below, the number of sockpuppets already reaches 250 only from the beginning of this year.
— Luchesar • T/C 07:56, 16 March 2017 (UTC)

Adding 3 more accounts to this list:

Бич божи (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser) (lowercase "б" in compression to the above account)
Хабиби Илиев (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Пламен Стаматов (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Although some of them may be related to the harassment group that is checked below with puppet masters bg:User:Модернатор (trasl. "User:Modernator") and bg:User:Администратор (transl "User:Administrator"), it is still unclear if there are two different persons, the one imperonating the another, or one and the same vandal, that is why we will be glad if you help us.--The Wiki Boy (talk) 14:55, 17 March 2017 (UTC)

P.S. added bg:User:Stanimir X as a possible sock, edit pattern similar to those of bg:User:PavelStaykov.--The Wiki Boy (talk) 14:57, 17 March 2017 (UTC)

All of them are

Likely the same user. There a few possible additional socks: Джингилиев, С Огън и Меч, Македонски келеш, Неутрализация на турско-македонската банда, Бай Ташо, Тъй рече Заратустра, Прабългарски Войн, Молии, Станимир Чобанов, Прабългарски Войн, КончеВодно, Ким Ир Чен, Модернатори, Пламен Стаматов and likely many more. They use lots of different ip addresses from different countries. You, however, can consider range blocking 212.39.89.0/24. Ruslik (talk) 17:57, 18 March 2017 (UTC)

Thank you very much, Ruslik! — Luchesar • T/C 20:43, 18 March 2017 (UTC)

Vodniq [email protected]

Status: Done

List of users: Vodniq kon (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Мико Ставревь (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); КончеВодно (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Водноконче (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Illiev (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); VodnaKobila (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); VodenKon (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Лорд Модернатор Бръмбари (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Молии (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); СтаниславПрог (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Sockpuppet policy, The list of currently blocked accounts, most of which are socks

Reason(s): This may be connected to the previous case, but we believe it to be a separate puppeteer, who has been harassing the community for a long time (see e.g. Steward requests/Checkuser/2016-07#Mitko12). In the last few months his/her level of activity has risen considerably, and although we have a bot, which blocks most open proxies, the harassment continues. Thus, being so far been unable to curb this massive vandalism, I'd like to ask you to provide us with the IP ranges that have been used (for obvious reasons, I'm not asking for specific addresses), so that we can block them. If you'd rather not share this publicly, please let me know what other means of communication you'd prefer.

Your help will again be much appreciated.
— Luchesar • T/C 05:34, 16 March 2017 (UTC)

They are

Likely the same user as above. Ruslik (talk) 19:12, 18 March 2017 (UTC)

Thanks a lot, indeed! — Luchesar • T/C 20:43, 18 March 2017 (UTC)

[email protected] and others

Status: Done

List of users: Wikjanna (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Wikilaj (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Wecontrib (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Jedisvrais (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: ro:Wikipedia:Afișierul_administratorilor#Vladimir_Plahotniuc

Reason(s): Wikilawyering and POV editing at ro:Vladimir Plahotniuc. The vast majority of these accounts is concentrated around the article in question and the changes they push are all similar: removing negative comments and adding new opinions based on the subject's own websites, always claiming to follow BLP.--Strainu (talk) 07:19, 16 March 2017 (UTC)

Added Jedisvrais, an older account.--Strainu (talk) 10:14, 16 March 2017 (UTC)

Wikjanna, Wecontrib and Jedisvrais are

Confirmed. Wikilaj is

Unlikely. Ruslik (talk) 19:33, 16 March 2017 (UTC)

مھتاب احمد@en.wiki and others

Status: Not done

List of users: مھتاب احمد (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Hammadsaeed (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: en:Talk:Shah_Yaqeeq_Bukhari#A near copy, cannot be by accident

Reason(s): I have no doubt in my mind that user1 & user2 are two distinct users. Still, inline with discussion link, I have approached here for sockpuppet test.--Muzammil (talk) 16:29, 20 March 2017 (UTC)

Declined: English Wikipedia has local checkusers, please ask for a checkuser here. Pmlineditor (t · c · l) 16:55, 20 March 2017 (UTC)

[email protected], Victor [email protected] and [email protected]

Status: Done

List of users: Emilian1999 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); Victor P. (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser); CuldeSac12 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

CU log
Discussion: Talk pages of the three.

Reason(s): Same disruptive edit pattern (mainly recurrent copyright violations and missing source quotations, producing junk pages). There might be more accounts of the kind and there is reasonable suspicion that they are sockpuppets from a huge clone farm maintained by Beleiutz years ago (too old to be checked now). -- Victor Blacus (talk) 16:10, 26 March 2017 (UTC)

Unlikely Ruslik (talk) 18:57, 26 March 2017 (UTC)