Commons:Requests for checkuser

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed Technically indistinguishable
Likely Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust.8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing… Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

Category:Sockpuppet investigations#Requests%20for%20checkuser

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.

Then transclude your subpage on the top of the list at Commons:Requests for checkuser and remove {{Checkuser requests to be listed}} from the top of the case subpage.

Checkuser requests to be listed (empty)
nothing found

Requests

Amitsharma009

Status: resolved • view • edit • history • watch
Filed: 11:33, 14 June 2025 (UTC)

Rationale, discussion and results

Reason: All recently created accounts uploading a few files for advertisements in India. Also similar usernames (one word + numbers), and similar named files. Already blocked, but please check for sleepers and, if possible, block the range. Yann (talk) 11:33, 14 June 2025 (UTC)

Results: I come to Confirmed or very Likely to each other:

Blocking and tagging. --Lymantria (talk) 12:49, 14 June 2025 (UTC)

Jordanene7

Status: resolved • view • edit • history • watch
Filed: 08:56, 14 June 2025 (UTC)

Rationale, discussion and results

Reason: Both users were reported at COM:RFPP. TyraFan638 was blocked right away, then FamilyFan633 appeared shortly after that. I think it is good to check for sleepers. Lymantria (talk) 08:56, 14 June 2025 (UTC)

Results: Confirmed:

Most of them have already been locked and/or identified at en:Wikipedia:Sockpuppet investigations/Jordanene7. Tagging. Blocking and requesting global lock if necessary. --Lymantria (talk) 09:10, 14 June 2025 (UTC)

Greghenderson2006

Status: resolved • view • edit • history • watch
Filed: 06:09, 12 June 2025 (UTC)

Rationale, discussion and results

Reason: The puppeteer is community banned on en.wikipedia and the account Historyjunkie2024 there has been confirmed as sock puppet. See the discussion at en.wiki Greghenderson2006 talk. It's very suggestive that his reason for creating an alternate account is to avoid scrutiny for block evasion on English wiki, which can't be seen as a legitimate use of an alternate account. Matching camera model as well as close proximity of picture taking location of File:New Bullards Bar Dam with boats.jpg and File:Golden_Bough_Playhouse_auditorium.jpg supports the account Historyjunkie2024 is controlled by Greghenderson2006. Graywalls (talk) 06:09, 12 June 2025 (UTC)

Declined / ✓ Blocked anyways A Commons check is not necessary - a CheckUser run on any project is accepted by all other projects. I've blocked both accounts here, as use of multiple accounts here to bypass sanctions on another project is a blockable offense, even if nothing either account did locally would otherwise be problematic. The Squirrel Conspiracy (talk) 19:19, 12 June 2025 (UTC)

Vladimir Nimčević

Status: resolved • view • edit • history • watch
Filed: 05:41, 12 June 2025 (UTC)

Rationale, discussion and results

Reason: Per Commons:Administrators' noticeboard/Vandalism, it may be a good opportunity to check here on Commons for more socks of this LTA before any socks are being reported into COM:ANV. 〈興華街〉📅❓ 05:41, 12 June 2025 (UTC)

+3. 〈興華街〉📅❓ 04:38, 13 June 2025 (UTC)
Some are possibly related to others, For the whole group, I'd call this Inconclusive for the moment. Please report further occurences. --Krd 08:00, 14 June 2025 (UTC)

GMatteotti

Status: resolved • view • edit • history • watch
Filed: 20:09, 3 June 2025 (UTC)

Rationale, discussion and results

Reason: Sockpuppet of User:GMatteotti. The same behavior as with the previous account User:Pal-lon-cin. Renaming requests are constantly being made, even though they were previously rejected. Images are being uploaded under the new names due to the rejections. Redirects are being removed and their immediate deletion is being demanded. This includes the unnecessary removal of categories from images that were previously correctly categorized. Please also search for potential sleeper socks. זיו「Ziv」 • For love letters and other notes 20:09, 3 June 2025 (UTC)

User:GMatteotti, a new possible sock puppet is on the way. Uploaded the images of Rasputin under User:Ladyserina, as before with User:Ikumir, with the same names. זיו「Ziv」 • For love letters and other notes 15:10, 11 June 2025 (UTC)

Confirmed

Stale

The Squirrel Conspiracy (talk) 01:53, 4 June 2025 (UTC)

Confirmed Ladyserina (talk • contribs • Luxo • SUL • deleted contribs • logs • block user • block log ) to this case. --Lymantria (talk) 17:51, 11 June 2025 (UTC)

Kiananjomani

Status: resolved • view • edit • history • watch
Filed: 03:37, 11 June 2025 (UTC)

Rationale, discussion and results

Reason: Please see here:

https://commons.wikimedia.org/wiki/Special:Contributions/Kiananjomani

https://commons.wikimedia.org/wiki/Special:Contributions/Mystery_and_the_methods

https://commons.wikimedia.org/wiki/Special:Contributions/5.122.192.49

https://commons.wikimedia.org/wiki/Special:Contributions/These_events_occurred

Since both Kiananjomani and Mystery and the methods use Template:KonstantinvonWedelstaedt for copyvio images, I think Mystery and the methods is sockpuppet of Kiananjomani, since Kiananjomani created account first. Kiananjomani also reverted copyvionote of images with invalid license that These events occurred uploaded, so I think These events occurred can be also a sockpuppet of Kiananjomani.

Mystery and the methods tagged copyvio template to an image with valid license two times:

1nd

2nd

5.122.192.49 also removed copyvionotes template, similar to Kiananjomani and Mystery and the methods, moreover also tagged deletion request to another image with valid license: here.

Copyvio images uploaded by Kiananjomani, also with Mystery and the methods and These events occurred has similar medata. Tô Ngọc Khang (talk) 03:37, 11 June 2025 (UTC)

Results Confirmed:

Blocking and tagging. --Lymantria (talk) 18:03, 11 June 2025 (UTC)

Checkuser does not comment on IPs. --Lymantria (talk) 18:05, 11 June 2025 (UTC)
The accounts are globally locked. 〈興華街〉📅❓ 10:47, 12 June 2025 (UTC)
Thanks. The Squirrel Conspiracy (talk) 19:04, 12 June 2025 (UTC)

Ricardinho da Souza Silva 7

Status: resolved • view • edit • history • watch
Filed: 18:24, 12 April 2025 (UTC)

Rationale, discussion and results

Reason: Recently, a colombian IP range started adding articles of banks on the French Wikipedia. I was checking the contributions one by one, and I found that these accounts have been uploading the photos that are currently seen in the french articles. As for the first two, these are confirmed socks at ptwiki - it could help having a new verification here at Commons. --Stïnger （会話） 23:12, 6 June 2025 (UTC).

Working This will take a while. The Squirrel Conspiracy (talk) 20:12, 7 June 2025 (UTC)

Confirmed as Ricardinho da Souza Silva 7

Confirmed as same user and Likely as Ricardinho da Souza Silva 7

Confirmed as same user and Likely as Ricardinho da Souza Silva 7

Confirmed as same user and Deferred to pt.wiki that this is Ricardinho da Souza Silva 7

Blocking and tagging now. The Squirrel Conspiracy (talk) 20:28, 7 June 2025 (UTC)

✓ Done The Squirrel Conspiracy (talk) 20:45, 7 June 2025 (UTC)


Rajesh56om

Status:  to be archived • view • edit • history • watch
Filed: 10:25, 04 June 2025 (UTC)

Rationale, discussion and results

Reason: Suspected lock evasion: Self-promoting xwiki SPA, more than a dozen socks per w:en:Wikipedia:Sockpuppet investigations/Rajesh56om. --Achim55 (talk) 10:25, 4 June 2025 (UTC)

Both suspects are not mentioned in the given link. What is the exact reason for the check? Krd 14:25, 4 June 2025 (UTC)
They promote exactly the same person "Rajesh Kumar Ram" (likely themself), explicitly to be seen on simple:ItsIncubius, en:ItsIncubius and d:Q130417033. --Achim55 (talk) 21:43, 4 June 2025 (UTC)

Results: Likely the same:

Because of the interest in "Rajesh Kumar Ram", connection to this case and the case at enwiki is Likely as well. --Lymantria (talk) 05:23, 5 June 2025 (UTC)

Hi, I also added Rajsharmakaviraj (talk · contributions · Statistics · Recent activity · block log · User rights log · uploads · Global account information) as most probable sock. Yann (talk) 09:47, 7 June 2025 (UTC)
Thank you. The account is already blocked at enwiki and globally locked in 2023 (and now Stale). --Lymantria (talk) 13:56, 7 June 2025 (UTC)

서울출장

Status: open • view • edit • history • watch
Filed: 23:08, 31 May 2025 (UTC)

Rationale, discussion and results

Reason: Same picture Cyberwolf (talk) 23:08, 31 May 2025 (UTC)

Please provide the exact reason for the check. --Krd 04:06, 3 June 2025 (UTC)
I understand what Cyberwolf is saying. They're pointing at the deleted version history of File:Ujawal Jha.jpg. The Squirrel Conspiracy (talk) 11:50, 8 June 2025 (UTC)


This one is a mess. There's a huge amount of spam coming from this range, and it's difficult to tell how many humans are behind these accounts.

 It looks like the same person in the photos to me:

Likely a set:

Confirmed as a set:

Possible as part of one of these sets:

Inconclusive

  • At least a dozen other accounts in this range that have had their contribs wiped as spam already.

I've blocked UjawalJha34, Ujawal Jha A, Latifat97, and Odeyalepeter13 for abuse of multiple accounts. I'm only comfortable tagging the first two as socks of 서울출장. If a more experienced CU wants to take a look at this case themselves, I'd encourage them to do so. The Squirrel Conspiracy (talk) 11:50, 8 June 2025 (UTC)

Added Fathia 9 (talk • contribs • Luxo • SUL • deleted contribs • logs • block user • block log ) to the group of Latifat97 and Odeyalepeter13. --Lymantria (talk) 11:18, 10 June 2025 (UTC)

Aggans

Status: resolved • view • edit • history • watch
Filed: 00:25, 19 May 2025 (UTC)

Rationale, discussion and results

Reason: Cyberwolf (talk) 00:25, 19 May 2025 (UTC)

Thank you for opening the checkuser case. I will copy my reasoning from AN/B to here.
Tvpuppy (talk) 01:44, 19 May 2025 (UTC)
Possibly they both make childish uploads screen shots of fandom and other violations Cyberwolf (talk) 03:08, 19 May 2025 (UTC)

Confirmed as Crimea Republic

The Squirrel Conspiracy (talk) 04:34, 19 May 2025 (UTC)

@Cyberwolf and Tvpuppy: I moved this here and deleted the old page. The Squirrel Conspiracy (talk) 04:35, 19 May 2025 (UTC)
There are some more likely socks:
GPSLeo (talk) 09:35, 19 May 2025 (UTC)
From a technical point of view, I do not see more than
  • Possible: ErrrrrWhat
  • Inconclusive: ФЫЦ, Saarabout
Perhaps The Squirrel Conspiracy can shed their light at behavioural evidence. I did find two Confirmed accounts Krd Puppet and Stack the Countries which I tagged and blocked if necessary. --Lymantria (talk) 06:01, 22 May 2025 (UTC)
I think it's obvious that ФЫЦ and Saarabout are someone's socks. I could be convinced that ErrrrrWhat is Crimea Republic - some of the tells look right - but it'd be nice to get more eyes on it. Maybe user:Achim55 and user:krd, since the first case was before my time as a CU? The Squirrel Conspiracy (talk) 08:13, 22 May 2025 (UTC)
I'm also calling this Inconclusive. --Krd 06:20, 1 June 2025 (UTC)
IMO Saarabout is Unlikely because of their edits on enwiki. --Achim55 (talk) 16:37, 1 June 2025 (UTC)
@Lymantria @The Squirrel Conspiracy I reported Aggans (talk • contribs • Luxo • SUL • deleted contribs • logs • block user • block log ) and Imbackjjj (talk • contribs • Luxo • SUL • deleted contribs • logs • block user • block log ) to SRG. 〈興華街〉📅❓ 10:31, 8 June 2025 (UTC)
✓ Done: both of them are globally locked. 〈興華街〉📅❓ 02:53, 9 June 2025 (UTC)
For older requests, please see Commons:Requests for checkuser/Archives
Category:Sockpuppet investigations