Commons:Requests for checkuser/Case/Hfive5sgd2

From Wikimedia Commons, the free media repository
Jump to navigation Jump to search
If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 May 25

[edit]

Status:  to be archived • view • edit • history • watch
Filed: 13:24, 25 May 2023 (UTC)

[edit]

Rationale, discussion and results

[edit]

I already blocked them, but please check for sleepers. Also could you please block the range(s), as this is beginning to be tedious. Thanks, Yann (talk) 13:24, 25 May 2023 (UTC)[reply]

  •  It looks like a duck to me - We are not unaware of range blocks. When four different CUs have looked into this case over two months, you may and should assume possible range blocks have already been made (they have). As indicated below, there is a large number of ranges. We cannot make /34, /32 -wide blocks on dozens of ranges without unacceptable collateral damage--simply RBI. Checkuser is not magic pixie dust. There is also no real purpose in checking for sleepers, as spambots are not the same as "real human" LTAs. The latter create pools of sleepers to draw from when one account is blocked, so finding sleepers prevents future disruption. The former, however, this case, create single-use accounts that upload one or several images and then are abandoned never to be used again. (I don't see that any account has an activity window longer than several minutes--if I've missed one, please provide it) Accordingly, finding these accounts does nothing to prevent future disruption, which is a prerequisite for a check. Эlcobbola talk 13:47, 25 May 2023 (UTC)[reply]
  • Even short term range would be useful. Don't spambots create more than one account at the time? How blocking sleepers before they are used are not preventing future disruption? I don't get that. Yann (talk) 13:53, 25 May 2023 (UTC)[reply]
Let's take the first five accounts from your request as examples:
Xoilactvio
  • 10:50, 25 May 2023 - created
  • 10:51, 25 May 2023 - copyvio 1
  • 10:52, 25 May 2023 - copyvio 2
Tk88aicasino
  • 06:34, 25 May 2023 - created
  • 06:35, 25 May 2023 - copyvio (only 1)
Bongdalusp
  • 08:03, 24 May 2023 - created
  • 08:05, 24 May 2023 - copyvio (only 1)
Sm66nhaca
  • 05:41, 24 May 2023 - created
  • 05:42, 24 May 2023 - copyvio (only 1)
Tk88cz
  • 09:05, 23 May 2023 - created
  • 09:06, 23 May 2023 - copyvio (only 1)
1) They are not created in batches ("Don't spambots create more than one account at the time?") and 2) As I said, these are spambots that are created, immediately upload, then are never used again. With the way rounding works, we would have to to find them the exact minute of their creation to prevent disruption--i.e., they cannot realistically be blocked before use ("How blocking sleepers before they are used are not preventing future disruption"). Эlcobbola talk 14:44, 25 May 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 May 16

[edit]

Status:  to be archived • view • edit • history • watch
Filed: 13:15, 2 May 2023 (UTC)

[edit]

Rationale, discussion and results

[edit]

Spam for the same type of websites, using the same style. Famiwo12 and Uifami12 are spamming the same websites as prior socks Famiwocom, Famiwocom1, Uifamicom, and Uifamicom1. However, a complication is that in prior checkuser results Jameslwoodward identified Uifamicom and Famiwocom as likely socks of Hfive5sgd2, but later elcobbola identified Uifamicom1 and Famiwocom1 as a distinct group of socks. Marbletan (talk) 13:06, 16 May 2023 (UTC)[reply]

Marbletan, I said "seem clearly," which is an expression of appearance, not of fact or certainty ("elcobbola identified Uifamicom1 and Famiwocom1 as a distinct group of socks"). There are a very high number of ranges involved, so data from Jim's previous check was not the same as was available to me (verily, Uifamicom1 and Famiwocom1 were the only two accounts in the range). This is not a complication or an issue needing resolution; spam socks can be blocked as is, and knowing a "true master" is of no importance. Эlcobbola talk 14:23, 17 May 2023 (UTC)[reply]
Previous checkuser requests turned up more socks than were listed, so it was useful in identifying additional spam which I nominated for deletion. But per your suggestion, I will report future socks to the administrator's noticeboard rather than making additional requests here. Thanks for your help and for your suggestions. Marbletan (talk) 15:19, 17 May 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 May 12

[edit]

Status:  to be archived • view • edit • history • watch
Filed: 13:15, 2 May 2023 (UTC)

[edit]

Rationale, discussion and results

[edit]

Spam for the same type of website, using the same style. Please check for additional accounts, as previous checkuser requests have turned up ones that I've missed. Marbletan (talk) 17:07, 12 May 2023 (UTC)[reply]

  • Confirmed. (Uifamicom1 and Famiwocom1 seem clearly to be a separate spammer--e.g., ads are photographs of computer screens--but are confirmed to each other with no sleepers at the moment.) Эlcobbola talk 18:08, 15 May 2023 (UTC)[reply]
    The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
    Subsequent requests related to this user should be made     above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 May 8

[edit]

Status:  to be archived • view • edit • history • watch
Filed: 13:15, 2 May 2023 (UTC)

[edit]

Rationale, discussion and results

[edit]

Spam for the same type of website, using the same style. Please check for additional accounts, as previous checkuser requests have turned up ones that I've missed. Marbletan (talk) 17:36, 8 May 2023 (UTC)[reply]

✓ Done Obvious sock. Yann (talk) 18:39, 8 May 2023 (UTC)[reply]
Namle2002 is Confirmed related to Hfive5sgd2 .     Jim . . . (Jameslwoodward) (talk to me) 20:57, 10 May 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 May 2

[edit]

Status:  to be archived • view • edit • history • watch
Filed: 13:15, 2 May 2023 (UTC)

[edit]

Rationale, discussion and results

[edit]

Spam for the same type of website, using the same style. Please check for additional accounts, as previous checkuser requests have turned up ones that I've missed. Marbletan (talk) 13:15, 2 May 2023 (UTC)[reply]

✓ Done Blocked by Jim. Yann (talk) 18:39, 8 May 2023 (UTC)[reply]

Hfive5sgd2 Apr 19

[edit]
[edit]

Rationale, discussion and results

[edit]

Spam for the same type of website, using the same style. Please check for additional accounts, as previous checkuser requests have turned up ones that I've missed. Marbletan (talk) 13:02, 19 April 2023 (UTC)[reply]

  • For both of the requests above (May 2 and April 19), these three
  • Uifamicom
  • Famiwocom
  • Qpxjvnorg

are Confirmed.

  • Hfive5sgd2 is Likely related to the three. .     Jim . . . (Jameslwoodward) (talk to me) 20:33, 2 May 2023 (UTC)[reply]
    The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
    Subsequent requests related to this user should be made     above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 Apr 11

[edit]
[edit]

Rationale, discussion and results

[edit]

Spamming the same websites as two previous confirmed socks with similar usernames (Zerelamcom and Eleteescom). Marbletan (talk) 13:10, 11 April 2023 (UTC)[reply]

Confirmed and added User:Ipeepzcom. - FitIndia Talk ✉ 08:25, 12 April 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 Apr 3

[edit]
[edit]

Rationale, discussion and results

[edit]

Similar spam for Singapore casinos. As before, it is likely that there are others. Marbletan (talk) —Preceding undated comment was added at 13:30, April 4, 2023 (UTC)

Confirmed --Krd 17:15, 4 April 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2 March 27

[edit]
[edit]

Rationale, discussion and results

[edit]

Obvious socks of the previous group - same spam, same behavior. As before, it is likely that there are others that I haven't seen yet. Marbletan (talk) 12:55, 27 March 2023 (UTC)[reply]

Confirmed added User:Eleteescom and User:Lowvoltagecontractorinorlando - FitIndia Talk ✉ 15:39, 27 March 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.



If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/Hfive5sgd2}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Hfive5sgd2

[edit]

Status: open • view • edit • history • watch
Filed: 13:36, 16 March 2023 (UTC)

[edit]

Rationale, discussion and results

[edit]

Reason: These accounts are all uploading advertisements for Singapore casinos. Each account uploads one file then never edits again. All file descriptions are very similar, so they are clearly the work of the same person/organization. I'm certain that I've seen additional accounts in recent days doing the same (but can't find them at the moment), so checkuser will likely turn up more than the three listed here. Marbletan (talk) 13:36, 16 March 2023 (UTC)[reply]

I added a couple more. Still not sure I've listed them all or not. Marbletan (talk) 17:34, 16 March 2023 (UTC)[reply]
Confirmed and added Typhu88top, Xuanhieuorgg, Beestickercom1, Beestickercom, Satthepphatdatt, Sabaesportsorg and Xuanhieuorg1 - FitIndia Talk ✉ 22:24, 16 March 2023 (UTC)[reply]
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.


Retrieved from "https://commons.wikimedia.org/w/index.php?title=Commons:Requests_for_checkuser/Case/Hfive5sgd2&oldid=772462269"