Steward requests/Checkuser/2022-01

Please do not post any new comments on this page. This is a discussion archive first created in January 2022, although the comments contained were likely posted before and after this date. See current discussion.

Doing... --Sotiale (talk) 08:58, 8 January 2022 (UTC)

•  Confirmed Jeff.yuan, Z1aqx2sw
• Likely 盧莉娟

From a technical point of view. --Sotiale (talk) 09:06, 8 January 2022 (UTC)

• When tracking the activities of these accounts across several projects, I find Én.Különösen.Szereti.Amerika.589(en,commons) and Special:CentralAuth/KKopkoss.Tings(zh) are also typical undisclosed PAID editors with some intersections with this group. But their data appears to be expired already?--虹易 (talk) 03:30, 4 January 2022 (UTC)

•  Confirmed Group 1: Magoroofu, Oortaorguus Swdy, 7.ESlebedie8.FREIHEIT, Stella Phang, Democracy Never Dies, 西范特斯卢克德马里, Roogérs.Joosé, Xogk-Frederick, Wentwentgogone, Sakiey, Sotonepheen, Otleiz
• Stale デラクララバイブ, 123Aristotle

---

• They used VPN/OPs.

From a technical point of view. To be honest, there are a few more suspect accounts, but I don't have enough data to confirm it because it's VPN. --Sotiale (talk) 13:28, 4 January 2022 (UTC)

@Sotiale:Is it possible to share with the local community regarding those suspected accounts? Maybe the local community can determine if those accounts have similar editing behavior and possibly block them. --${\displaystyle \int }$（☎） 20:55, 4 January 2022 (UTC)

There are multiple users with IPs assigned to the VPNs, and some don't contribute to zhwiki, so I don't think that's a good idea. It is better to request additionally discovered accounts. --Sotiale (talk) 10:56, 5 January 2022 (UTC)

Thanks for your help, Sotiale! The last activity of デラクララバイブ on enwp is on Dec 3, 2021. Is that also stale? And I notice a successful CU against 123Aristotle in 2019: Steward_requests/Checkuser/2019-02#5258若批评不自由则赞美无意义@zhwiki. Would there be any useful data retained at that time? --虹易 (talk) 14:36, 5 January 2022 (UTC)

And could you please check whether Steward_requests/Checkuser/2020-06#夏夜雨纷纷@zh.wikipedia is related to this group? They share a few similarities (use sophisticated tricks to pretend to be normal users; but also some differences, say the former tend to request IPBE privilege). --虹易 (talk) 14:43, 5 January 2022 (UTC)

Just find another bunch of possibly related accounts mainly active on enwp and zhwp:

• PQZZKYSOUSips
• 識時務者為俊傑
• Hiarus Jrneoliuos
• KoNYofParking
• LCSQVZ-4326
• OYxey
• 1989ChenKongkong1225
• Komooos.Bi
• XMJG
• FatAres11
• Yubuji
• Huiorz Sw (retracted due to low similarities)
• TimyReading
• YipB (retracted due to low similarities)

These listed shares some similarities in behavior patterns or intersections of articles with the checked group and/or with each other. Some of them can be confirmed to be typical covert advertising while some are just a little suspicious. Could you reveal any of the "multiple users with IPs assigned to the VPNs" are listed above? --虹易 (talk) 07:14, 6 January 2022 (UTC)

@虹易: I was not a steward at the time 123Aristotle was investigated, and there is no data related to 123Aristotle. Comparing the current accounts with the conducted ones in June of last year also, in my personal opinion, is difficult to obtain meaningful results from a technical point of view. I can investigate the accounts you suggested if you wish, but since this is still a request from zhwiki, I recommend that you do so after hearing the community's opinion on HAM. --Sotiale (talk) 12:08, 6 January 2022 (UTC)

• @Sotiale:Thanks for the advice. The majority of this bunch of accounts appears to be active on enwiki. Is it fine for me to request from zhwiki (after discussing on zh:HAM)? Or should I request from enwiki?--虹易 (talk) 12:17, 6 January 2022 (UTC)

If they don't have enough contributions on zhwiki and are active on enwiki, it's better to ask the enwiki checkuser team. Because there might be enough data there. --Sotiale (talk) 12:19, 6 January 2022 (UTC)

Thanks. Got it. Reported here: en:Wikipedia:Sockpuppet_investigations/123Aristotle#06_January_2022 with several users omitted due to low similarities or being stale.--虹易 (talk) 15:08, 6 January 2022 (UTC)

@Sotiale: en:Wikipedia:Sockpuppet_investigations/123Aristotle#06_January_2022 confirmed and globally blocked the later group. But it did not mention much about the former. May I have your advice on whether it is proper to report all accounts in the former group to SRG as sockpuppets of 123A? I personally think those can be duck and the admin has already locally blocked them as 123A on zhwiki while the community is a little hesitant (too few discussions in HAM to reach a consensus). --虹易 (talk) 10:51, 8 January 2022 (UTC)

@虹易: By OYxey, the group confirmed by me is associated with the group confirmed on enwiki and can be locked. But since I don't have enough information about 123Aristotle, a steward who knows it will have to deal with it. Anyway, since I have already stated that these are related to confirmed group on enwiki, you can explain 123Aristotle's pattern to SRG and post your request for locking. --Sotiale (talk) 11:01, 8 January 2022 (UTC)

Understand. Reporting soon.--虹易 (talk) 11:04, 8 January 2022 (UTC)

Status:    Done

List of users

Ra18120 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

N22012150 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Cr12018151 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

• CU log
• Discussion: zh:Wikipedia:元維基用戶查核請求#Ra18120

Reason(s): These users all expressed oppose to delete the article 新宜蘭車站 in the local AFD. Though I believe that these users can be ducked based on username combination (chemical element initial+numbers), a local admin expressed concerns for ducking these accounts via this method. ${\displaystyle \int }$（☎） 03:44, 2 January 2022 (UTC)

Doing... --Sotiale (talk) 04:03, 2 January 2022 (UTC)

•  Confirmed N22012150, Chen1936, Ffd34223, Ph1208148, F128786321, Ama2018033, C891785, Cr12018151, Pt1535578, Qwe711334
• Inconclusive Ra18120

---

• The confirmed group's accounts are all active on the public network, so check the behavior pattern first when taking action against them.
• In case Ra18120, there is not enough data to publish the conclusion of the investigation, so it is recommended to check whether the pattern is consistent with the confirmed accounts.

From a technical point of view. --Sotiale (talk) 08:38, 2 January 2022 (UTC)

Doing... --Sotiale (talk) 12:22, 6 January 2022 (UTC)

•  Confirmed Group 1: Leslie Fineapple, Tonya finea
•  Confirmed Group 2: 479cWDHGgfy28fgyb, 473746dhbd58291hd
• Unrelated BNBNHK

---

• Unrelated Group 1 and 2

From a technical point of view. --Sotiale (talk) 12:32, 6 January 2022 (UTC)

Unfortunately, I don't have the data of all users related to OA2021(I'm not an employee of the Foundation, I'm just a community elected steward and a normal editor like you!), only the Foundation has(I'm not sure but it probably). My personal opinion is that it is very likely that users related to OA2021 will share methods of bypassing checkuser in several ways, and I think the subject of this investigation will also be familiar with and able to bypass. I can investigate if you want, but I hope you don't think the results will be reliable. --Sotiale (talk) 12:17, 6 January 2022 (UTC)

Please investigate if possible. The community will understand that the results may be unreliable due to personnels possibly familiar with ways to bypass CU. Luciferian☆ 13:12, 6 January 2022 (UTC)

Doing... --Sotiale (talk) 02:35, 9 January 2022 (UTC)

• Likely LakefrontCHI and 4thst
• Possible Gszq

---

• They all use the IP assigned to VPN, so be careful when taking action.
• Possible is recommended that you take action when further evidence is supported.
• LakefrontCHI used part of the IPs of VPN used by Walter Grassroot, but there is no data match other than that.

From a technical point of view. --Sotiale (talk) 03:26, 9 January 2022 (UTC)

Could you please briefly explain why they are similar to D17? Also, explain why the local admin thinks that they can't be a duck. --Sotiale (talk) 09:28, 31 December 2021 (UTC)

Similar as Steward_requests/Checkuser/2021-11#Pi967970@zh.wikipedia and Steward_requests/Checkuser/2021-11#Brewnora@zh.wikipedia, same edit pattern on the addition of categories in articles of football athletes, universities, etc. --GY Fan★ 15:22, 31 December 2021 (UTC)

Also, aren't they doing same wrong behavior of some blocked-on-Incubator accounts (e.g. Bosco1122) within 1.5 months ago? Liuxinyu970226 (talk) 15:18, 2 January 2022 (UTC)

Local admin ducked this case, but since D17C is an LTA who frequently uses socks, I would suggest a sleeper check. Itcfangye (talk) 10:47, 9 January 2022 (UTC)

•  Confirmed Eastpointciy and Brewnora, 泛美馬史

From a technical point of view. --Sotiale (talk) 11:49, 9 January 2022 (UTC)

Doing... --Sotiale (talk) 12:14, 9 January 2022 (UTC)

•  Confirmed 台灣巴士企業, WSC18, 鄭啟民

--Sotiale (talk) 12:19, 9 January 2022 (UTC)

Hello everyone, could you please check for me if this is really a school IP? CFDG123 (talk) 21:11, 2 January 2022 (UTC)

@CFDG123: you are on the wrong page. This IP belongs to RISQ, so it might be, I guess? Stang 21:18, 2 January 2022 (UTC)

OK, but it’s blocked forever on French Wiktionnaire, can someone change the during if block? CFDG123 (talk) 21:19, 2 January 2022 (UTC)

Not done. According to public information, this IP may be from a school. There's nothing stewards should do, though. This is something you should address with local admins at fr.wiktionary. They are the ones that can change local blocks. Regards.—Teles «Talk ˱_{C L @ S}˲» 22:01, 2 January 2022 (UTC)

But the person who blocked us never believes that it’s a school IP, it’s sad. CFDG123 (talk) 22:11, 2 January 2022 (UTC)

You can try letting them know via their Meta talk page. NguoiDungKhongDinhDanh 00:52, 3 January 2022 (UTC)

Inconclusive There was not enough data to make a determination either way who this belongs to. -- Amanda (aka DQ) 22:14, 11 January 2022 (UTC)

Both users are  Confirmed. -- Amanda (aka DQ) 16:05, 12 January 2022 (UTC)

Doing... This is accepted because of block evasion of Williajmsms and Chenweihu444222. The checkuser will also focus on that. --Sotiale (talk) 08:54, 13 January 2022 (UTC)

•  Confirmed Chenweihu0402, Chenweihu444222, Williajmsms, Huchenwei0402

--Sotiale (talk) 08:58, 13 January 2022 (UTC)

Doing... --Sotiale (talk) 09:01, 13 January 2022 (UTC)

• Unrelated BNBNHK and Neosoulhk

From a technical point of view. --Sotiale (talk) 09:07, 13 January 2022 (UTC)

Doing... --Sotiale (talk) 09:10, 13 January 2022 (UTC)

•  Confirmed Group 1: 6uouser, Fk13579
•  Confirmed Group 2: 胡忠雙虎, PLKWCC wu chung college, PLKWCC wu chung

---

• Unlikely Group 1 and 2

From a technical point of view. --Sotiale (talk) 09:14, 13 January 2022 (UTC)

Doing... --Sotiale (talk) 09:16, 13 January 2022 (UTC)

•  Confirmed CKL204, Railway，MRT

From a technical point of view. --Sotiale (talk) 09:18, 13 January 2022 (UTC)

Doing... --Sotiale (talk) 09:21, 13 January 2022 (UTC)

• Unrelated between each account

From a technical point of view. --Sotiale (talk) 09:37, 13 January 2022 (UTC)

• Nothing special

--Sotiale (talk) 09:50, 13 January 2022 (UTC)

Can you briefly explain how editing is similar to TabTabocTab? --Sotiale (talk) 09:52, 13 January 2022 (UTC)

Oops sorry. They in common continuously added OR+IINFO reporter lists to Hong Kong news shows, e.g. w:zh:無綫新聞 and w:zh:七點半新聞報道. Luciferian☆ 10:13, 13 January 2022 (UTC)

• Unlikely MKjai607 and 一位匿名用户

It may be because I lack information about this LTA, but in the comparison between these two accounts they have little technical relevance. There doesn't seem to be any data suggesting they have additional accounts. --Sotiale (talk) 11:50, 13 January 2022 (UTC)

And isn't it too harsh to post 7 requests at once? :p --Sotiale (talk) 11:51, 13 January 2022 (UTC)

Not done 識時務者為俊傑 is too Stale to check. -- Amanda (aka DQ) 14:32, 13 January 2022 (UTC)

Got it. Thanks anyway. --虹易 (talk) 14:46, 13 January 2022 (UTC)

Status:    Done

List of users

光俊 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

暴君765647 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Woody Alan 17 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

• CU log
• Discussion: w:zh:Wikipedia:元維基用戶查核請求#Tommy860119

Reason(s): A CheckUser is requested as similar vandalism behaviour on Hong Kong bus stops wikilinks is identified (similar to Stale indef'ed Tommy860119), and that user 1 was found to remove warning messages on user 2's talk page. User 3 is added as similar behaviour is also found and reported to local AIV, but the exact warning message on user 2's talk page removed by user 1 is posted by user 3, so an additional check is requested to clarify the relationships between the three accounts. --Luciferian☆ 09:52, 14 January 2022 (UTC)

Doing... --Sotiale (talk) 11:23, 15 January 2022 (UTC)

•  Confirmed Group 1: 暴君765647, タイラント67529, 光俊
•  Confirmed Group 2: Woody Alan 17, Alan 1799

---

• Unrelated Group 1 and 2

From a technical point of view. --Sotiale (talk) 11:39, 15 January 2022 (UTC)

Doing... --Sotiale (talk) 00:31, 16 January 2022 (UTC)

•  Confirmed Lieno Kk, Lotgeruna, Lleubr, Yotkqua, Ceatac, 28.65O5.83.5, Amallgh, Vhxy916, Logteruna, Vvduil, Clyklotvi10

---

•  Confirmed past request(2021-06) and other Oesjaar's request accounts

From a technical point of view. I have taken the necessary steps and it will work in the short term. --Sotiale (talk) 00:49, 16 January 2022 (UTC)

Doing... --Sotiale (talk) 04:33, 16 January 2022 (UTC)

• Unrelated between accounts, or not enough data

From a technical point of view. --Sotiale (talk) 04:41, 16 January 2022 (UTC)

• There were no hidden accounts in their ranges.

--Sotiale (talk) 04:47, 16 January 2022 (UTC)

•  Confirmed Kralj pohnluka, Masne cicetine, Suzana jajić

From a technical point of view. --Sotiale (talk) 23:32, 16 January 2022 (UTC)

•  Confirmed አዲስ አባል, የሰዎች ታሪክ, Kalebezra2021, Wikitewedaje, Mimitamylove, ልዩ ዝግጅት, Girma adnew, የኢትዮጵያውያን ታሪክ

@Daniuu: All locked. --Sotiale (talk) 11:10, 17 January 2022 (UTC)

@Gikü: Hi. Can you explain a bit more what a similar editing pattern is? This includes editing fields and the same pages, etc. --Sotiale (talk) 11:50, 17 January 2022 (UTC)

@Sotiale: Hi, of course, examples of edits that in my view follow a similar pattern are:

• uploading copyrighted files of Moldovan personalities while failing to justify fair use: ro:Special:Listă fișiere/RAMSES$44932 vs. ro:Special:Listă fișiere/Mikechirco
• adding the controversial ro:Category:Români basarabeni to biographies of Moldovan personalities: ro:Special:Diff/13964344 vs. ro:Special:Diff/14751747
• similar edit description while reverting other users' edits: [2] vs. [3]
• overall interest in biographies of Moldovan personalities of the 20th century: ro:Special:Contribuții/RAMSES$44932 vs. ro:Special:Contribuții/Mikechirco
• perhaps most importantly, Mikechirco continues RAMSES$44932's habit of adding dubious info in articles without citing sources (or citing weak sources) – a habit for which the latter has been warned and blocked for multiple times.

Hope this helps. Gikü (talk) 13:21, 17 January 2022 (UTC)

•  Confirmed Mikechirco and RAMSES$44932

From a technical point of view. --Sotiale (talk) 13:45, 17 January 2022 (UTC)

Just noticed ro:Special:Diff/14740563 – Mikechirco basically confirms with their own words they are Ramses under a different account. Could've used this shortcut. Thank you for your quick help! Gikü (talk) 14:52, 17 January 2022 (UTC)

In progress… --Martin Urbanec (talk) 15:06, 17 January 2022 (UTC)

Possible @Toghrul R: I'm unable to find enough evidence to reach a conclusion. CheckUser shows that the two users might be connected, but there's not enough evidence to confirm that. --Martin Urbanec (talk) 15:19, 17 January 2022 (UTC)

@Martin Urbanec thank you! Toghrul R (talk) 15:22, 17 January 2022 (UTC)

 It looks like a duck to me. See contribs on meta. They can be friends, family members or the same user. However, it is meaningless to distinguish whether it is meat or sock by investigation. --Sotiale (talk) 13:12, 15 January 2022 (UTC)

Okay, sure. I was just wondering if there's more accounts to check for copyvios but if they can be friends, family members or the same user, I agree that it's meaningless to check. SHB2000 (talk | contribs) 22:09, 15 January 2022 (UTC)

@SHB2000: Checkuser is to investigate the relationship between accounts, so sleeper check is only possible under very limited conditions. Have previous socking abuse logs, LTAs creating multiple accounts, etc. In this case, the sleeper check is difficult because the relationship between these two accounts is predictable and their previous abuse logs cannot be found separately. If you have other evidence or suspicions, please request again. --Sotiale (talk) 00:28, 16 January 2022 (UTC)

• Group 1: Bacon072 Possible Eatfood601, though the username would suggest a connection
• Group 2: Grandpacific  Confirmed Arethayoh
• I couldn't check Eddie.trigram and Grace101920 as I couldn't translate the Chinese enough to run a check, so I will leave this for Sotiale.

-- Amanda (aka DQ) 05:43, 18 January 2022 (UTC)

•  Confirmed Group 3: Eddie.trigram, Grace101920, Eddie18872
• Unlikely Group 1, 2 and 3

I didn't have any impressions about group 2. That is, I don't know who it is. For group 1, I'm not sure if it's 114.27. If you can analyze their behavioral patterns, please investigate whether it is similar to X43. Please note that this is not a technical result, of course, and is the opinion of one user. Since they may be unrelated users, it is recommended not to block unless there is sufficient evidence. --Sotiale (talk) 11:43, 19 January 2022 (UTC)

Done. See the thread below. --Sotiale (talk) 12:20, 21 January 2022 (UTC)

Update: merged three requests for the varous elwikis. The first user was mainly active on elwikisource, the second on elwiktionary, the third one on elwikinews. --Daniuu (talk) 15:10, 20 January 2022 (UTC)

Done. See the thread below. --Sotiale (talk) 12:21, 21 January 2022 (UTC)

•  Confirmed(elwikinews): Πατροκλής, Αναστάσιος89, Νάσος78
•  Confirmed(elwiktionary): Μέρτος
•  Confirmed(elwikisource): Θεοδόσιος,
•  Confirmed(elwikivoyage): Ανέστης90, Φαβιανός 78, Πατροκλέας, Ευθύμης789, Ερμίλλος,
•  Confirmed(elwiki): Ευγένιος090, Θεμης688, Φαίη789, Ιωαννη790, Νονός79, Δημήτρης12346, Hdjsjsiik -90, AlRab78, MinasGri, Nas 17 7, Bestinclass1984, Bestinclass1981, Τασος79, Μαρια79, Ελενη69, Σωσω, Παναγιωτης-30, Χριστινα-30, Σισσυ-22, Βασω -50, ΝΙΚΗ-90, Δάνης, Θεόπεμπτος, Γενοβέφα89, Θωμας79, Πανος 59, Ερμύλλος-90, Ζανέτπ, Φιλάρετος, Δομήνικος10, Αγάθων-80, Φώτης 780, Τηλέμαχος 234, Θεωνας, Κοσμάς-89, Δοσης, Κέλσιος, ακης5079, Τασος-93, Ντάνης, Ιορδάνης-6, Τασος-30, Ερμύλλος, Δομήνικος 08, Σπυρος79

---

• All  Confirmed. Same user on elwiki projects.
• Duplicate accounts per project excluded.
• All accounts are locked now.

@Chalk19, C messier, CubicStar, Texniths, and Daniuu: Dear elwiki projects admins and requester, for your information. From a technical point of view. --Sotiale (talk) 12:37, 21 January 2022 (UTC)

All these accounts are of course the same annoying person using the same pattern: <name><number>. Blocking is good, but they keep churning expendable accounts all day long; they spam wikidata with rubbish/wrong/bad information; and they hop between IP ranges from the same provider in Greece. --cubic[*]star 13:07, 21 January 2022 (UTC)

@CubicStar: Yes, I understand that very well. I hope that some action against them to be taken in a while, albeit short term, will work for elwiki :) --Sotiale (talk) 13:15, 21 January 2022 (UTC)

@Sotiale A related IP range. ǁǁǁ ǁ Chalk19 (talk) 13:56, 21 January 2022 (UTC)

 Confirmed हिंदू and हेमा राज रन्डी -- Amanda (aka DQ) 00:56, 22 January 2022 (UTC)

 Confirmed Adam Chacko and हृदयेश. -- Amanda (aka DQ) 01:02, 22 January 2022 (UTC)

•  Confirmed ABX456, Ca11ist0 and 臭臭貓

@LuciferianThomas: How sad and gloomy is this? --Sotiale (talk) 02:34, 22 January 2022 (UTC)

•  Confirmed Group 1: Χαρμόσυνος, Apostolos723
• Likely Εκκλησιαστικός and Group 1

From a technical point of view. --Sotiale (talk) 05:03, 22 January 2022 (UTC)

Status:    Done

List of users

Sharpray20991 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Vanneswu20991 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Sensation20991 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Jackiechan20554 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Kanzen20991 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Aaronkwok20665 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Samanthajade20991 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Daniel20991 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

• CU log
• Discussion: zh:Wikipedia:元維基用戶查核請求#Sharpray20991

Reason(s): As a follow up request for Steward_requests/Checkuser/2022-01#Albert20009@zh.wikipedia, the local community suspect that these accounts could be owned or controlled by zh:LTA:Albert20009. As one could probably tell, all these users can be ducked by username, but, after digging into the editing behaviors, it is hard to be convinced that these accounts have a clear relationship with Albert20009. Therefore, a check is requested; a sleeper check would be much appreciated. Thanks in advance. ${\displaystyle \int }$（☎） 05:27, 22 January 2022 (UTC)

Please note that the third account (Sensation20991) is ducked by local admin as Albert20009. --${\displaystyle \int }$（☎） 05:28, 22 January 2022 (UTC)

•  Confirmed Kinsasha20991, Tinatoon20993, Bagaskara20995, Daniel20991, Sharpray20991, Sensation20991, Samueltai20991, Vanneswu20991, Charmed20998, Jackiechan20554, Investor20994, Keenan20667, Babajuju20997, Dinamika20999, Ezagionino20991, Aaronkwok20665, Susila20995, Andalina20991, Kanzen20991, Fransisca20999, Samanthajade20991

From a technical point of view. Because the ISP used by these users variably assign IPs to their ranges(this goes beyond /16 in IPv4 or /32 in IPv6), investigating the individual ranges the account used is much more useful for finding hidden accounts. --Sotiale (talk) 06:23, 22 January 2022 (UTC)

•  Confirmed Group 1: Jot 1997, ਅਮਨਦੀਪ ਸਿੰਘ ਮਹਿੜਾ, Anujot kaur 1
• Unrelated ਗੁਰਸਿਮਰਨ ਸਿੰਘ and Group 1

From a technical point of view. It has a different feel than socking. It is also possible that they edited it with a friend or family.. or same company. --Sotiale (talk) 03:27, 23 January 2022 (UTC)

Hello. If they admit to owning their account, why do you need this investigation? And Rezaabb3 is an account that doesn't exist. Could you please confirm? --Sotiale (talk) 11:48, 19 January 2022 (UTC)

@Alp Er Tunqa: -- Amanda (aka DQ) 01:03, 22 January 2022 (UTC)

@AmandaNP: user accepted that all of this accounts belongs to him. I think that we can close this request.--Alp Er Tunqa (talk) 06:47, 22 January 2022 (UTC)

Thank you for your reply. Then mark it as withdrawn. --Sotiale (talk) 12:38, 22 January 2022 (UTC)

Doing... --Sotiale (talk) 11:20, 24 January 2022 (UTC)

•  Confirmed Tomas97642, Freedom Hong Kong, タイラント67529, 光俊, 暴君765647

Froooooom a technical point of view. --Sotiale (talk) 11:30, 24 January 2022 (UTC)

I added 2 new account that appeared.-- Newbamboo (talk) 15:28, 24 January 2022 (UTC)

It seems like they edited a similar topic rather than the same page, and I think you need further explanation. A brief description of similarly editing the same field or producing poor quality pages does not substantiate the need for investigation. Could you be more specific about why you think they are the same user? Thank you. --Sotiale (talk) 08:42, 25 January 2022 (UTC)

Translated: "These accounts appear consecutively in a span of few days, they all edit in the same topic, the citation errors they produce are exactly the same, the prose all looks like literary appreciation, and they post articles like that alternatively." Milky·Defer 11:09, 25 January 2022 (UTC)

Thanks, I just read Newbamboo's comment and your translation. --Sotiale (talk) 13:11, 25 January 2022 (UTC)

• Likely Hyiwei, Vincenzo9669, 木叶子, Manulll, E0779550
• Possible WANG YUHUI123
• Unlikely 韩沁妍

---

• Likely group including Possible is in the IP ranges of public institutions.

From a technical point of view. They may be same users, but they may be editing collectively and possibly part of a class. Therefore, it is recommended to consider possibilities other than socking when taking action against them. --Sotiale (talk) 13:28, 25 January 2022 (UTC)

I found enough reason to check Πατέρας των αθωών & Γαληνός. I need more details for UnaToFiAN-1. Γαληνός = Apostolos723. Πατέρας των αθωών is Possible to these two. Once more evidence is provided I can look into UnaToFiAN-1. -- Amanda (aka DQ) 05:26, 18 January 2022 (UTC)

@C messier: -- Amanda (aka DQ) 01:04, 22 January 2022 (UTC)

The only evidence is the similar edits pattern (high volume small edits). --C messier (talk) 09:07, 22 January 2022 (UTC)

I'm going to  Declined further checks then for that user right now. If there is more evidence, we can look in the future. -- Amanda (aka DQ) 15:26, 25 January 2022 (UTC)

•  Confirmed Group 1: HAHA2931023, Hinma20
• Unlikely or Unrelated rest of accounts and Group 1

From a tehcnical point of view. Based on the data that exists so far, they do not seem to have a strong technical connection. --Sotiale (talk) 12:46, 26 January 2022 (UTC)

@Gikü: Hi. In accordance with the privacy policy, we cannot publicly provide any information that identifies that IP as that user. If you are certain that the ranges are theirs, it is recommended to do it with rangeblock. --Sotiale (talk) 11:44, 24 January 2022 (UTC)

This is an investigation that cannot be done, so mark it as not done. If another investigation is required, please post your request again. --Sotiale (talk) 08:35, 25 January 2022 (UTC)

Status:    Done

List of users

Hsuan0 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Helper711 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

• CU log
• Discussion: zh:Wikipedia:元維基用戶查核請求#Hsuan0

Reason(s): Nearly duck-able editing summary. Both users show similar behavior on the article zh:Running Man節目列表 by adding a lot of trivial content to the article. ${\displaystyle \int }$（☎） 19:08, 27 January 2022 (UTC)

• Unrelated Hsuan0 and Helper711

They are different users. --Sotiale (talk) 09:22, 28 January 2022 (UTC)

Doing... --Sotiale (talk) 11:30, 31 January 2022 (UTC)

•  Confirmed Ventakeswaraswamigovinda, Lakshmiprasadv, Katherinetoday, Diegosanangelo

---

• +  Confirmed on wikidatawiki: Diegosanangelo, Cookmymeals, Donotbullypeople, Maragaretthatcher, Katherinemayweather, Garryishere, Chelseayster, Katherinetoday, Jesusmysaviouroforever, Garryveeisdumbo

I just locked all their accounts as their cross-wiki spam is obvious, and it is confirmed on wikidatawiki, eswiki, tewiki. --Sotiale (talk) 11:45, 31 January 2022 (UTC)

@Chaduvari: Oops, forgot my ping. Here you are. --Sotiale (talk) 11:51, 31 January 2022 (UTC)

Thanks @Sotiale, for the quick action. __ Chaduvari (talk) 12:05, 31 January 2022 (UTC)

@Rastinition: Hi. I've looked through both their hrwiki contribs and wikidata contribs, but it's been too long since the last edit and no data remains. Therefore, this investigation would be impossible. --Sotiale (talk) 09:49, 30 January 2022 (UTC)

@Sotiale:If it's not active in hr.wikipedia.org recently, but active elsewhere recently,like en.wikipedia.org or other wikipedia.org, can we check? Rastinition (talk) 10:10, 30 January 2022 (UTC)

@Rastinition: Only Kiewowpal has one recent edit on enwiki, but the other comparison accounts have no edit. Also, enwiki cases cannot be dealt with here as they have their local checkuser team. --Sotiale (talk) 10:15, 30 January 2022 (UTC)

It means we can't check when they didn't appear together in en,hr or zh recently, even though A is active in fr, B is active in ja and C is active in es recently.

I got it, thank @Sotiale: very much. Rastinition (talk) 10:28, 30 January 2022 (UTC)

Then mark it as not done. Note that if they have an edit anywhere on the Wikimedia wikis within 90 days, they can be investigated. Of course, such a cross-wiki check should present a clear need and evidence that you should proceed with it. --Sotiale (talk) 10:33, 30 January 2022 (UTC)