Commons:Requests for checkuser

Shortcut: COM:CHECK, COM:RFCU Does your request belong here? This is the place to request sockpuppet checks or other investigations requiring CheckUser privileges. Checkuser is a last resort for difficult cases. Use other methods first. You can try posting on the administrator's noticeboard for example. Please do not ask us to run checks without good reason: These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments. Request completed Confirmed Likely Possible Unlikely Inconclusive Unrelated Completed Stale Request declined Declined Checkuser is not for fishing. Checkuser is not magic pixie dust. The CheckUser Magic 8-Ball says  It looks like a duck to me Checkuser is not a crystal ball. Information Additional information needed Deferred to  Doing…  Info Running a check will only be done to combat disruption on Commons, or as required to assist CheckUser investigations on other Wikimedia wikis. Valid reasons for running a check include vandalism where a block of the underlying IP or IP range is needed, disruptive sockpuppetry, vote-stacking, and similar disruption where the technical evidence from running a check would prevent or reduce further disruption to Wikimedia projects. Requests to run a check with ambiguous reasoning will result in delays - please provide a rationale at the time you make the request Show what the disruption to the project is, and why you believe the accounts are related. Requests to run a check on yourself will be declined The privacy policy does not allow us to make a check that has the effect of revealing IP addresses. Outcome Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Check back regularly to see the outcome of your request. Closed requests are archived after seven days. Privacy violation? If you feel that a checkuser has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombudsman commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check: Cases are created on subpages of Commons:Requests for checkuser/Case. Creating a request Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only. Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it. There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say. If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here. Example If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser." You will be taken to a page where you can fill out the request. Please make your request there brief and concise. Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Completed requests

LaEmmadu06

view • edit • history • watch
Filed: 11:09, 24 August 2013 (UTC)

• LaEmmadu06 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• TheMdu06 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

LaEmmadu06 was blocked indefinitely on 2013-05-26 after continuing to upload nothing but large numbers of blatant copyright violations in spite of multiple warnings and a previous block. The user was also active on French Wikipedia, editing articles on Hollywood celebrities and TV series.

TheMdu06 was registered on 2013-08-02. The account was used to upload File:Mako Mermaids.jpg (a copyright violation) here and to edit fr:Mako Mermaids within minutes of an edit by LaEmmadu06. Note the similarity in the names ("The" being the English equivalent of "La" and "Mdu" being a shortened version of "Emmadu"). —LX (talk, contribs) 11:09, 24 August 2013 (UTC)

Results

Likely Original acct is stale, but considering the name similarity and the Mako Mermaid connection, I think the 2 accts are highly likely to be connected. I've blocked TheMdu06 as a sock. INeverCry 17:59, 24 August 2013 (UTC)

CavaleiroDragaoTV

view • edit • history • watch
Filed: 14:33, 25 August 2013 (UTC)

• CavaleiroDragaoTV (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• AndreCampos324 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: Both accounts were used to upload same non-trivial logo and were confirmed sock-puppets on Portuguese Wikipedia. See my talks for details. EugeneZelenko (talk) 14:33, 25 August 2013 (UTC)

Results

• They are here Confirmed as well and I can't find any more sockpuppets. I'll leave a possible block up to you. Trijnstel_talk 16:43, 25 August 2013 (UTC)

Operahome

view • edit • history • watch
Filed: 23:22, 27 August 2013 (UTC)

• Operahome (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Operahome1 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Republika.Makedonija (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Ratkojanev (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Gaga0000 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• 178.222.71.190 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

• 77.46.192.177 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

Rationale

These users are all connected to the cross-wiki case that pushes the Wikipedia biographies for Igor Janev and Ratko Janev. Gaga0000 is the account with the oldest contributions which can probably no longer be checked. However, it is connected to Operahome as this file was uploaded by Gaga0000 first, then deleted through this DR and subsequently re-uploaded by Operahome as File:Igor slika22.JPG. The uploads of Gaga0000 are also interesting for the point that they include a picture of Igor Janev and three of Ratko Janev. This upload by Operahome, depicting Igor Janev, and the uploads by Ratkojanev were apparently taken with the same camera, a Canon iVIS DC50. Republika.Makedonija did not upload anything but is interesting for this edit where he claims an upload by Operahome to be his own and he is also connected to Operahome1 per this comment. The IPs were active in the related DRs, acting on behalf of the other accounts.

These accounts were active at Commons. There exist many more accounts related to them at various Wikipedia projects. See this DR at de-wp for a whole army of sockpuppets which were all subsequently blocked. Some of the named accounts were already blocked at Commons for abusing multiple accounts, i.e. Operahome1 by Gmaxwell, Operahome by Jameslwoodward, and Republika.Makedonija for his inappropriate username by Jameslwoodward. Ratkojanev and Gaga0000 are still unblocked. --AFBorchert (talk) 23:22, 27 August 2013 (UTC)

Results

Likely Ratkojanev and Gaga0000 are stale, but considering the other evidence presented I think it's highly likely they're connected to the rest. I've blocked both.

Confirmed The other accounts/IPs are connected per CU. Vladasrbije, already blocked, is also connected. Other connected accounts: Radoslav Gacinovic, IPS-u-Beogradu, Gaga999. I've blocked these 3 as well. RTS TV Vesti is another previously blocked sock. INeverCry 00:10, 28 August 2013 (UTC)

• More confirmed socks: Radoslav Gaćinović1, and Imeto.RM. INeverCry 00:28, 28 August 2013 (UTC)
• Another confirmed sock: Gaga007. INeverCry 01:45, 28 August 2013 (UTC)
• Another confirmed sock: Ambassador.MFA.RM. INeverCry 02:26, 29 August 2013 (UTC)
  • fyi: blocked on DE NS.PRES.RM, BND.mk, Wikileaks.belgrade, Operahome, Operahome1, PEN.CENTRE.Macedonia, Nac.Sec.Adv, Intel.pentium.5, IPS-u-Beogradu, MFA.RM, Gaga000, Вики.мак greetings --Nolispanmo 13:56, 28 August 2013 (UTC)
  • As well as Ambassador.MFA.RM, FCI.Makedonija. --Anka (talk) 15:35, 28 August 2013 (UTC)

• Also note w:en:Wikipedia:Sockpuppet investigations/Operahome. --Rschen7754 18:48, 28 August 2013 (UTC)

Britneypiri

view • edit • history • watch
Filed: 23:19, 19 August 2013 (UTC)

• Britneypiri (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Samuelpire (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: Britneypiri was blocked recently due to uploading unfree files on Commons (block request). Britneypiri edited Portuguese Wikipedia by adding those unfree files on articles. There, s/he created this portal about a singer. Second account Samuelpire is the only one that edited this page and its subpages. This account also uploads unfree files here on the same subject and links them on articles at Portuguese Wikipedia. So, same behavior can be seen on both accounts.—Teles «Talk to me˱_{M @ C S}˲» 23:19, 19 August 2013 (UTC)

BTW, I just ran a check on pt.wikipedia and Samuelpiripi (talk · contribs) is also related. Thanks for checking.—Teles «Talk to me˱_{M @ C S}˲» 00:43, 20 August 2013 (UTC)

More socks found on that /16:

• Samuelpiripi (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Ludypiri (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Pipipiri (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Camilipiri (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Analipiri (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

INeverCry 01:45, 20 August 2013 (UTC)

Thank you. They are now also blocked on pt.wiki. No other account found from checkusering them, but they can be confirmed to be socks there as well.—Teles «Talk to me˱_{M @ C S}˲» 00:13, 21 August 2013 (UTC)

Naldopiriri (talk · contribs) is another account I found on pt.wiki after checkuser those accounts. We also have a category: pt:Categoria:!Fantoches de Naldopiriri.—Teles «Talk to me˱_{M @ C S}˲» 00:19, 21 August 2013 (UTC)

Thanks. I've blocked it. INeverCry 02:55, 21 August 2013 (UTC)

• JaquelineLine (talk · contribs) seems to be another sock. Same behavior and from a check on pt.wikipedia I would say it is at least possible.—Teles «Talk to me˱_{M @ C S}˲» 23:04, 29 August 2013 (UTC)

On the same /21 with 2 of the others, similar copyvio uploads, similar name pattern/format. Looks like a sock to me. I've blocked the acct and put the info on cu.wiki. INeverCry 23:39, 29 August 2013 (UTC)

Results

I think it's highly Likely that the 2 accounts are connected. I've blocked both accounts indef. INeverCry 23:52, 19 August 2013 (UTC)

I think I can say it's Confirmed that Britneypiri is a sockmaster with the above results, and that all the above accounts are connected. Same kind of copyvio uploads for all. See Category:Sockpuppets of Britneypiri. INeverCry 01:59, 20 August 2013 (UTC)

Other socks:

• Samuelpiri (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser). INeverCry 02:04, 20 August 2013 (UTC)
• LarissaPire (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser). INeverCry 21:27, 21 August 2013 (UTC)

Dudu kio

view • edit • history • watch
Filed: 16:24, 30 August 2013 (UTC)

• Dudu kio (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Dudunhas (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: Dudu kio uploaded unfree files and received several warnings due to that. They had no effect, then this account was blocked for three days. Dudunhas was created two days later in block evasion and to keep violating copyrights. They edit the same article on pt.wikipedia where they add copyrighted image and text.—Teles «Talk to me˱_{M @ C S}˲» 16:24, 30 August 2013 (UTC)

By checking them on pt.wikipedia, Dudu kio can also be confirmed with Jorgiano (talk · contribs), who is also a fan of pt:Paloma Bernardi and doesn't bother to respect copyrights.—Teles «Talk to me˱_{M @ C S}˲» 16:37, 30 August 2013 (UTC)

If relation can be confirmed, Jorgiano was used to evade the block made on Dudu kio.—Teles «Talk to me˱_{M @ C S}˲» 19:59, 30 August 2013 (UTC)

• Two other accounts follow the same pattern of copyvio and have same interest on the movie "Lascados" and on the actress Paloma Bernardi. Souza edu (talk · contribs) is uploading a banner of the movie; Marllaneres (talk · contribs) is uploading cast photos and backstage scenes (notice that Marllaneres is not a recent account, which is not what we usually see on socks, but this may have been an unused account created by the same person times before). The IP provided below, was used on pt.wikipedia to link images uploaded by accounts on Commons.
  • Souza edu (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
  • Marllaneres (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
  • 189.12.86.131 (talk • contribs • WHOIS • tor • RBL • tools • luxo's • crossblock • block user • block log • checkuser)

—Teles «Talk to me˱_{M @ C S}˲» 22:41, 5 September 2013 (UTC)

Souza edu is a Confirmed sock and now blocked. As for Marllaneres, this user is on a different range and service provider, while the other 4 accounts are on the same range and with the same provider. I can't confirm any connection via CU, and so Marllaneres is Inconclusive at best. INeverCry 01:10, 6 September 2013 (UTC)

Results

Confirmed All 3 on same /17 (Dudu kio alone has used IPs that can only be narrowed down to the /17) and with same UA. Copyvio subject matter seals the deal. I've blocked the 3 accounts. INeverCry 02:33, 31 August 2013 (UTC)

Anna'sLoyalServant

view • edit • history • watch
Filed: 10:06, 8 September 2013 (UTC)

• Anna'sLoyalServant (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• Anna'sLoyalServant (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Stolen Vehicle (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: Combat disruption. The user Anna'sLoyalServant reuploading reuploaded previously deleted content. Once these files deleted again, another account, Stolen Vehicle did exactly the same. I would like to know if others account with such intent names have been created by the same user, so they can be blocked before they are used to upload. Dereckson (talk) 10:06, 8 September 2013 (UTC)

Results

• User:Anna'sLoyalServant - previously blocked by Dereckson
• User:Stolen Vehicle - previously blocked by Dereckson
• User:Another Stolen Vehicle - blocked by me

These are all Likely the same user.
.     Jim . . . . (Jameslwoodward) (talk to me) 11:09, 8 September 2013 (UTC)

Thank you. --Dereckson (talk) 12:07, 8 September 2013 (UTC)

Clécio Brito

view • edit • history • watch
Filed: 18:59, 2 September 2013 (UTC)

• Clécio Brito (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Suspected related users

• ClécioGabriel (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Brito Gabriel (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• LuísBritoHenrique (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

Rationale

• Reason: ClécioGabriel can be confirmed to be a sock by checking them on pt.wikipedia. Others are from same range, edit on same interest areas (especially Xuxa and Caicó) and add copyrighted material on pt.wikipedia and Commons.
  On pt.wikipedia, Brito Gabriel and LuísBritoHenrique used same IP, which belongs to the same range used by others. —Teles «Talk to me˱_{M @ C S}˲» 18:59, 2 September 2013 (UTC)

• I just blocked User:Amanda Gabriela da Silva on Portuguese wiki. Both editing pattern and checkuser info match with Clécio Brito. I have created a page on CU wiki for this case.—Teles «Talk to me ˱_{C L @ S}˲» 03:43, 18 September 2013 (UTC)

 Blocked INeverCry 06:00, 18 September 2013 (UTC)

Results

• The following are Likely related to one another:

• Clécio Brito (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Emerson08 (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• Brito Gabriel (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)
• LuísBritoHenrique (talk • contribs • Luxo's • SULutil • deleted contribs • logs • block user • block log • checkuser)

• I have blocked all of them. Tiptoety ^talk 19:05, 2 September 2013 (UTC)

Archives

• For requests that are older than seven days, please see Commons:Requests for checkuser/Archives