Jump to content

Commons:Requests for checkuser

From Wikimedia Commons, the free media repository

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed  Technically indistinguishable
Likely  Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust. 8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing…  Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.


Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Checkuser requests to be listed (empty)
nothing found

Requests

[edit]

We933ngg

[edit]

Status: resolved • view • edit • history • watch
Filed: 01:36, 28 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: All of these users have engaged exclusively in similar (and very strange) edits related to these three images:

Omphalographer (talk) 01:36, 28 May 2025 (UTC)[reply]

Working This one is a mess. The Squirrel Conspiracy (talk) 05:21, 28 May 2025 (UTC)[reply]

Confirmed

Stale but blocked per behavioral evidence

Please give me a bit to actually block and tag these all. The Squirrel Conspiracy (talk) 05:50, 28 May 2025 (UTC)[reply]

Thanks for taking care of this mess. It's one hell of a sock drawer. Omphalographer (talk) 07:18, 28 May 2025 (UTC)[reply]
Null comment to reset the tracking template to resolved. The Squirrel Conspiracy (talk) 21:31, 28 May 2025 (UTC)[reply]

PedroDuqueSantiago

[edit]

Status: resolved • view • edit • history • watch
Filed: 21:05, 27 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: The IP 120.29.76.52 recently made edits to the user talk pages of both SVG flag maker and Home37. Since Home37 is a confirmed sock of Nv7801, I ran a check of SVG flag maker to see if they were also a Nv7801 sock. What I actually found was surprising:

Confirmed

Very Likely

Possible

Unrelated

Per Yann, John emil hernandez is a sock of PedroDuqueSantiago. As such, the rest of these are also socks of PedroDuqueSantiago. @Yann: Does the behavioral evidence line up for this? I'm completely unfamiliar with PedroDuqueSantiago and their socks. The Squirrel Conspiracy (talk) 21:05, 27 May 2025 (UTC)[reply]

Yes, but not enough data for Kyllkyllkyll. Yann (talk) 09:06, 29 May 2025 (UTC)[reply]
OK, thanks. I've tagged SVG flag maker as a sock of PedroDuqueSantiago and upgraded their block to indef. The Squirrel Conspiracy (talk) 22:47, 29 May 2025 (UTC)[reply]

TheLFC

[edit]

Status: resolved • view • edit • history • watch
Filed: 15:30, 27 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Greetings! I have reason to believe that this user is another sockpuppet of the already blocked Breath1Fire. He is engaged in a systematic war of edits in the same files and categories. Iktsokh (talk) 15:30, 27 May 2025 (UTC)[reply]

Confirmed:
TheLFC blocked and tagged. These belong to en:Wikipedia:Sockpuppet investigations/SelfStarter2/Category:Sockpuppets of SelfStarter2. So I will move this case to SelfStarter2 as master. --Lymantria (talk) 21:06, 28 May 2025 (UTC)[reply]

Sonic Chaos Gamer

[edit]

Status: resolved • view • edit • history • watch
Filed: 09:19, 24 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Suspected lock evasion, see Category:Sockpuppets of Sonic Chaos Gamer. Same interest in fiddling on templates and same time frame of edits. Started editing yesterday after the account User:Sonic & Mario Gamer was blocked. Additional info: EPIC blocked m:Special:Contributions/50.100.200.0/22 globally. --Achim55 (talk) 09:19, 24 May 2025 (UTC)[reply]

The two are Unrelated. The Squirrel Conspiracy (talk) 18:15, 24 May 2025 (UTC)[reply]

Guishín Pastofrio

[edit]

Status: resolved • view • edit • history • watch
Filed: 02:20, 6 March 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Same behavior here and at sp:wp. More than half a dozen puppets already detected. Some were blocked for DUCK. Always the same kind of pictures (Contemporary and older politicians from Uruguay, etc.), same language (I can provide diff but are in Spanish). The puppeteer always upload images (most of them deleted here) for trying to insert them in infoboxes, etc. Rastamby (talk) 02:59, 22 May 2025 (UTC)[reply]

Inconclusive --Krd 05:53, 25 May 2025 (UTC)[reply]


Aggans

[edit]

Status: open • view • edit • history • watch
Filed: 00:25, 19 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Cyberwolf (talk) 00:25, 19 May 2025 (UTC)[reply]

Thank you for opening the checkuser case. I will copy my reasoning from AN/B to here.
Tvpuppy (talk) 01:44, 19 May 2025 (UTC)[reply]
Possibly they both make childish uploads screen shots of fandom and other violations Cyberwolf (talk) 03:08, 19 May 2025 (UTC)[reply]

Confirmed as Crimea Republic

The Squirrel Conspiracy (talk) 04:34, 19 May 2025 (UTC)[reply]

@Cyberwolf and Tvpuppy: I moved this here and deleted the old page. The Squirrel Conspiracy (talk) 04:35, 19 May 2025 (UTC)[reply]
There are some more likely socks:
GPSLeo (talk) 09:35, 19 May 2025 (UTC)[reply]
From a technical point of view, I do not see more than
  • Possible: ErrrrrWhat
  • Inconclusive: ФЫЦ, Saarabout
Perhaps The Squirrel Conspiracy can shed their light at behavioural evidence. I did find two Confirmed accounts Krd Puppet and Stack the Countries which I tagged and blocked if necessary. --Lymantria (talk) 06:01, 22 May 2025 (UTC)[reply]
I think it's obvious that ФЫЦ and Saarabout are someone's socks. I could be convinced that ErrrrrWhat is Crimea Republic - some of the tells look right - but it'd be nice to get more eyes on it. Maybe user:Achim55 and user:krd, since the first case was before my time as a CU? The Squirrel Conspiracy (talk) 08:13, 22 May 2025 (UTC)[reply]


Htz67

[edit]

Status: resolved • view • edit • history • watch
Filed: 18:23, 15 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: There's a possibility that these accounts are the same person, as there's a persistence on uploading photos of a politician from Bolivia who will participate in upcoming elections. The issue is the uploads are being made through newly created Flickr accounts, and could be laundering the license (see here and here). There are two Flickr accounts involved, one of which was recently created and selfproclaimed the "official account" of the politician's party but the username is the same uploader in Commons. One account insists that he "took the photo and removed the copyright", but the accounts have received numerous deletion warnings because copyright infringements. Since all three accounts are set up to contain the politician's photos, I'm requesting a CU verification. Taichi (talk) 18:23, 15 May 2025 (UTC)[reply]

Confirmed --Krd 05:11, 18 May 2025 (UTC)[reply]
Please help to tag their uploads accordingly. Krd 05:14, 18 May 2025 (UTC)[reply]
Shall all of their uploadd be deleted per COM:PCP? --Krd 09:38, 18 May 2025 (UTC)[reply]
@Taichi:  ? Krd 13:48, 22 May 2025 (UTC)[reply]

寺人孟子

[edit]

Status: resolved • view • edit • history • watch
Filed: 12:17, 18 May 2025 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: Same device as the former socks 1 week ago. Akishima Yuka (talk) 12:17, 18 May 2025 (UTC)[reply]


For older requests, please see Commons:Requests for checkuser/Archives
Retrieved from "https://commons.wikimedia.org/w/index.php?title=Commons:Requests_for_checkuser&oldid=1037399590"