Steward requests/Checkuser/2025-02
Requests
Abu amara @ur.wikipedia
- List of users
- Abu amara (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- مشرا (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Confirmed Abu amara, مشرا, Abdul Wah
- From a technical point of view. ~ Yahya (talk • contribs) 18:33, 31 January 2025 (UTC)
Qiufenggudu@zh.wikipedia
- List of users
- Qiufenggudu (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- 散打王 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: w:zh:Wikipedia:傀儡調查/案件/Qiufenggudu#2025年1月23日
- Confirmed 蒙古天骄, 刘生堂, 散打王, 挚爱小哆, Ehrijrf, 塔林呼恒
- Unrelated Unrelated Qiufenggudu
From a technical point of view. --Sotiale (talk) 07:18, 2 February 2025 (UTC)
Rastinition@zh.wikipedia
- List of users
- Rastinition (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: w:zh:Wikipedia:傀儡調查/案件/Rastinition
Reason(s): User has been suspected of using multiple IP sockpuppets in antivandalism edit reversion and article cleanups while a revert ban is in place. A check is requested to confirm whether the user has been abusing IP socks.
For stewards' reference: recently rejected self-request on the same case; previously done CUs on the same basis, in case there are concerns on privacy issues – as long as IPs are not revealed or linked publicly I think it's well within acceptable CU.
Luciferian Thomas 14:12, 31 January 2025 (UTC)- Detailed evidence is in the talk page of the SPI request (here), if stews wants further information. Luciferian Thomas 14:14, 31 January 2025 (UTC)
- Unrelated Unrelated Rastinition and Rastinitionn
- There is no evidence to suggest that Rastinition abused non-login editing.
Note that this is conducted as an investigation to determine the relationship between Rastinition and Rastinitionn. --Sotiale (talk) 07:45, 2 February 2025 (UTC)
Ofurmeistarinn@is.wikipedia
- List of users
- Ofurmeistarinn (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Bjornkarateboy (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Doktor Möppudýr (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: is:Notandaspjall:Bjornkarateboy#Viðvörun (talk page warning to user about sock-puppetry)
- Confirmed Bjornkarateboy, Ofurmeistarinn, Doktor Möppudýr
From a technical point of view. --Sotiale (talk) 12:07, 3 February 2025 (UTC)
Aspectreishauntingeurope@az.wikipedia
- List of users
- Aspectreishauntingeurope (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Kromvell 1968 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- It's unclear if this request is for azwiki or for enwiki. The language code parameter in the template says azwiki, while the header says enwiki. Could you clarify? If this is a request for enwiki this should instead be referred to local checkusers, see en:WP:SPI. EPIC (talk) 19:54, 4 February 2025 (UTC)
- EPIC, It is for azwiki. --Sura Shukurlu (talk) 20:03, 4 February 2025 (UTC)
- @Sotiale, Hi. Can you please take a look? Sura Shukurlu (talk) 07:16, 5 February 2025 (UTC)
- w:Wikipedia:Sockpuppet investigations/Aspectreishauntingeurope Nemoralis (talk) 09:41, 5 February 2025 (UTC)
- Considering that the two were marked as unrelated at enwiki, I don't see much reason to perform a local check, unless there have been any signs of sleepers. EPIC (talk) 10:04, 5 February 2025 (UTC)
- On July 24, 2024, Kromvell 1968 wrote on the Village Pump of azwiki, asking how to move the Nargiz Absalova article, which he had worked on it, from draft status to the main space. However, upon reviewing the user's contributions, there is no record of him editing such an article on that date or in the surrounding period. Looking at the history of the now-deleted draft subpage of user Aspectreishauntingeurope (since I am sysop in azwiki, I have rights to view deleted revisions), it is evident that the Nargiz Absalamova article was written in that draft on July 23, 2024—one day before the inquiry was made. This suggests that the person may have worked on the article using a different account and then inquired about it the next day with another account. In the same inquiry, Kromvell 1968 also mentioned that he was working on the Akif Gurbanov article at that time and he would be creating articles for similar individuals. Shortly afterward, on August 17, 2024, Aspectreishauntingeurope improved and expanded the Akif Gurbanov article. Additionally, similar articles were created or expanded by Aspectreishauntingeurope both on azwiki and enwiki following this inquiry, not by Kromvell 1968. Another noteworthy detail is that, in the same inquiry on the Village Pump, Kromvell 1968 referred to the user who created the Nargiz Absalamova article on enwiki (Aspectreishauntingeurope) as "our friend" and stated, "we submitted the article on enwiki first, and they accepted it." Sura Shukurlu (talk) 11:38, 5 February 2025 (UTC)
- Considering that the two were marked as unrelated at enwiki, I don't see much reason to perform a local check, unless there have been any signs of sleepers. EPIC (talk) 10:04, 5 February 2025 (UTC)
- EPIC, It is for azwiki. --Sura Shukurlu (talk) 20:03, 4 February 2025 (UTC)
- Unrelated Unrelated both
The remaining data on azwiki does not seem to be much different from that on enwiki. Therefore, it would be difficult to see them as the same user. --Sotiale (talk) 07:59, 6 February 2025 (UTC)
Stalin kzj@zh.wikipedia
- List of users
- 賽伯 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Rastinitionn (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: zh:Wikipedia:傀儡調查/案件/Stalin_kzj#2025年1月6日
- Can you explain which edits of Rastinitionn are relevant to Taiwanese Universities? Rastinitionn's edits appear to be edits to the drama. --Sotiale (talk) 13:05, 7 February 2025 (UTC)
- The original text concept I reported at that time was "Special:CentralAuth/賽伯 and Special:CentralAuth/Rastinitionn both established en.wikipedia.org and ko.wikipedia.org accounts." My thought is that he is a person with "cross-wiki" activity habits, and it may be difficult to achieve a high degree of similarity in the scope of activities between different people.(But I also noted that why Special:CentralAuth/賽伯 followed ko.wikipedia.org. This record could hardly be found in his other past accounts.)Another reason is that of all the people who have impersonated me in the past, he has been the most frequent, or almost the only one who has tried to impersonate me.For me,Wikipedia:傀儡調查/案件/Stalin_kzj#2025年1月6日 was sent on January 6, and the account impersonating me was established and active on January 7. Is this too much of a coincidence?
- In the other way,this history should serve as clear behavioral evidence to show the relationship between Special:CentralAuth/賽伯 and Special:CentralAuth/Hsnudc.(Similar behavior can be found in my user page and talk page history at zh.wikipedia.org or ja.wikipedia.org)
- Rastinition (talk) 14:01, 7 February 2025 (UTC)
- Request withdrawn. Different editing behavior to form reasonable doubt. See amendment below. --{\displaystyle \int }(☎) 22:14, 7 February 2025 (UTC)
- While the stewards are responsible for conducting their own investigation, stewards primarily trust the clerk team's word to understand the request. Therefore, mistakes like this one can make other stewards more cautious in handling requests. I believe you know this without me having to repeat it again, but I ask that you carefully review the content when posting to SRCU. Thank you! --Sotiale (talk) 06:24, 8 February 2025 (UTC)
- The original text concept I reported at that time was "Special:CentralAuth/賽伯 and Special:CentralAuth/Rastinitionn both established en.wikipedia.org and ko.wikipedia.org accounts." My thought is that he is a person with "cross-wiki" activity habits, and it may be difficult to achieve a high degree of similarity in the scope of activities between different people.(But I also noted that why Special:CentralAuth/賽伯 followed ko.wikipedia.org. This record could hardly be found in his other past accounts.)Another reason is that of all the people who have impersonated me in the past, he has been the most frequent, or almost the only one who has tried to impersonate me.For me,Wikipedia:傀儡調查/案件/Stalin_kzj#2025年1月6日 was sent on January 6, and the account impersonating me was established and active on January 7. Is this too much of a coincidence?
Z3578128274@zh.wikipedia
- List of users
- Renamed user 8b9268103c011759bb2d2c14671bcc3a (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Stelle2000 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: zh:Wikipedia:傀儡調查/案件/Z3578128274#2025年2月7日
- @ATannedBurger thanks for the update, and apologies if it causes more work to check through the CU. I am not sure how the SPI message escaped my attention when I checked on the user before approving it earlier, except that the timestamp between when the SPI message on the talk page and my logged action was quite close to each other. Robertsky (talk) 00:34, 8 February 2025 (UTC)
- Confirmed Stelle2000, Renamed user 8b9268103c011759bb2d2c14671bcc3a
--Sotiale (talk) 06:39, 8 February 2025 (UTC)
Sura Shukurlu@az.wikipedia
- List of users
- Sura Shukurlu (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Noting that I already performed this check on a private request at the same time as this request was posted. I'll note here publicly as well that this is unlikely to be a compromise. With that being said I also found another related account in the check (Racobabapiro). EPIC (talk) 20:56, 8 February 2025 (UTC)
- This account was registered 30 minutes ago. Now thats weird. Nemoralis (talk) 20:58, 8 February 2025 (UTC)
- @EPIC, Did you check on the Azerbaijani Wikipedia or loginwiki? Can you please check on az-wiki? Turkmen talk 21:12, 8 February 2025 (UTC)
- I did check on azwiki (the account would either way be too old to be checked on loginwiki), and my conclusion is based on the data obtained from that local check. EPIC (talk) 21:13, 8 February 2025 (UTC)
- @EPIC, can we look at UA access dates? Nemoralis noted the UA difference. Turkmen talk 21:21, 8 February 2025 (UTC)
- The technical data for the two are somewhat different, but there are signs indicating the two are related. Now, the account has no local edits, however, so it's ultimately up to azwiki how to handle it. I would perhaps wait for a potential explanation unless any edits do come from the account in question. EPIC (talk) 21:28, 8 February 2025 (UTC)
- Thank you for your attention. Turkmen talk 21:57, 8 February 2025 (UTC)
- @EPIC, @Nemoralis, @Turkmen, I sincerely apologize to each and every one of you for the inconvenience I have caused. Just a while ago, I experienced a huge shock myself. My hands are still shaking. A thousand thoughts ran through my mind, and I still haven't fully recovered. At first, I thought I was under a systematic hacker attack. When I opened WhatsApp, I saw that even the messages I hadn’t read were marked as read, which made me extremely anxious. I tried to freeze my bank cards and etc. I really appreciate that you acted quickly as well. However, the reality turned out to be much simpler. I sincerely apologize, but I have been victim to my little brother and four other mischievous young guests who are currently at our home. Normally, my computer is always locked, but after I stepped away for just a few minutes, these childs somehow managed to "get access" to my computer. They made edits on Wikipedia, and as if that wasn’t enough, they also used my open web WhatsApp to send random messages to groups, teachers, and other contacts. My friends called me, warning that my WhatsApp had been hacked. When I checked my phone, I witnessed everything firsthand. Then, a fellow Wikipedian contacted me, and I realized that my Wikipedia account had also been compromised. My hands are still shaking as I write this. I deeply regret all of this and sincerely apologize again to everyone. The account in question was actually created by my brother, who named it Racobabapiro (a reference to his name, Rajab). Once again, I am truly sorry for causing any distress. A thousand thoughts ran through my mind, and my entire day was ruined. I went through intense stress, and my body is still shaking. Sura Shukurlu (talk) 22:10, 8 February 2025 (UTC)
- No worries, thank you for an explanation. Nemoralis (talk) 22:18, 8 February 2025 (UTC)
- @EPIC, @Nemoralis, @Turkmen, I sincerely apologize to each and every one of you for the inconvenience I have caused. Just a while ago, I experienced a huge shock myself. My hands are still shaking. A thousand thoughts ran through my mind, and I still haven't fully recovered. At first, I thought I was under a systematic hacker attack. When I opened WhatsApp, I saw that even the messages I hadn’t read were marked as read, which made me extremely anxious. I tried to freeze my bank cards and etc. I really appreciate that you acted quickly as well. However, the reality turned out to be much simpler. I sincerely apologize, but I have been victim to my little brother and four other mischievous young guests who are currently at our home. Normally, my computer is always locked, but after I stepped away for just a few minutes, these childs somehow managed to "get access" to my computer. They made edits on Wikipedia, and as if that wasn’t enough, they also used my open web WhatsApp to send random messages to groups, teachers, and other contacts. My friends called me, warning that my WhatsApp had been hacked. When I checked my phone, I witnessed everything firsthand. Then, a fellow Wikipedian contacted me, and I realized that my Wikipedia account had also been compromised. My hands are still shaking as I write this. I deeply regret all of this and sincerely apologize again to everyone. The account in question was actually created by my brother, who named it Racobabapiro (a reference to his name, Rajab). Once again, I am truly sorry for causing any distress. A thousand thoughts ran through my mind, and my entire day was ruined. I went through intense stress, and my body is still shaking. Sura Shukurlu (talk) 22:10, 8 February 2025 (UTC)
- Thank you for your attention. Turkmen talk 21:57, 8 February 2025 (UTC)
- The technical data for the two are somewhat different, but there are signs indicating the two are related. Now, the account has no local edits, however, so it's ultimately up to azwiki how to handle it. I would perhaps wait for a potential explanation unless any edits do come from the account in question. EPIC (talk) 21:28, 8 February 2025 (UTC)
- @EPIC, can we look at UA access dates? Nemoralis noted the UA difference. Turkmen talk 21:21, 8 February 2025 (UTC)
- I did check on azwiki (the account would either way be too old to be checked on loginwiki), and my conclusion is based on the data obtained from that local check. EPIC (talk) 21:13, 8 February 2025 (UTC)
Stalin kzj@login.wikimedia
- List of users
- 賽伯 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Hsnudc (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: zh:Wikipedia:傀儡調查/案件/Stalin_kzj#2025年1月6日
- I would also like to side-note potential xwiki abuse for 萎靡 and GJ4899 on wikidata. Of course, it would need further investigation which I currently do not have the time to allow me to do so : /
- cc @0xDeadbeef:. --{\displaystyle \int }(☎) 22:14, 7 February 2025 (UTC)
- Hi. It is unclear what you are requesting. At least loginwiki probably has outdated information about Hsnudc. Therefore, your current request cannot be processed. --Sotiale (talk) 06:27, 8 February 2025 (UTC)
- @Sotiale: Since Hsnudc's data on enwiki is not stale (en:Special:Contributions/Hsnudc, last edit on Feb. 4 of this year), my guess is that there will be data on login.wiki. To answer your question, this is a sleeper check. Thanks. {\displaystyle \int }(☎) 06:30, 8 February 2025 (UTC)
- Despite its name, loginwiki is a wiki with different functions. Therefore, there is no data there already. Since all data about them remains on enwiki, you must post a request on enwiki or otherwise be related to an account or incident on zhwiki so that the request can be processed. --Sotiale (talk) 06:37, 8 February 2025 (UTC)
- @Sotiale: I understand your point. But the question I'm having now is that considering 賽伯 does not have a local account on enwiki, there will be no technical data from 賽伯 available to enwiki CUers. Especially when involving xwiki abuse, how would enwiki CUs yield results that can provide an adequate picture?
- Also, despite the previous request I have determined that there are not enough evidence (considering counterarguements) to yield reasonable doubt that Rastinitionn is indeed Stalin kzj, but it may very well be from other LTAs (perhaps even Stalin kzj itself) since the impersonation rationale is there. From my understanding, impersonating Rastinition is not something only Stalin kzj would do.
- If you would like to provide further comments on the "萎靡 and GJ4899 on wikidata" situation, that will be greatly appreciated as well. {\displaystyle \int }(☎) 06:51, 8 February 2025 (UTC)
- If 賽伯 doesn't have an account on enwiki, does that mean that this account is different from this? --Sotiale (talk) 06:56, 8 February 2025 (UTC)
- Actually, I think this could be a case where a cross-wiki investigation is needed, but more information needs to be provided about this. Usually, if you can explain it to enwiki team and have the data, it can be completed there. If you think the cross-wiki investigationis necessary, you can provide me with more information. --Sotiale (talk) 07:04, 8 February 2025 (UTC)
- I want to bring up 2 other things.
- Because we have checked zh.wikipedia.org many times and accumulated a lot of accounts. I saw that one of the accounts was found to be related to zh:LTA:KAGE [3]. Are there any other details?
- Is it possible to check zh.wikipedia.org to see if there are other accounts?And globally lock all accounts that are confirmed to be Stalin kzj in the present, past and future.
- Rastinition (talk) 10:04, 9 February 2025 (UTC)
- enwiki CU says no sleepers: en:Special:Diff/1274814590 0xDeadbeef (talk) 12:06, 9 February 2025 (UTC)
- I want to bring up 2 other things.
- Despite its name, loginwiki is a wiki with different functions. Therefore, there is no data there already. Since all data about them remains on enwiki, you must post a request on enwiki or otherwise be related to an account or incident on zhwiki so that the request can be processed. --Sotiale (talk) 06:37, 8 February 2025 (UTC)
- @Sotiale: Since Hsnudc's data on enwiki is not stale (en:Special:Contributions/Hsnudc, last edit on Feb. 4 of this year), my guess is that there will be data on login.wiki. To answer your question, this is a sleeper check. Thanks. {\displaystyle \int }(☎) 06:30, 8 February 2025 (UTC)
- Hi. It is unclear what you are requesting. At least loginwiki probably has outdated information about Hsnudc. Therefore, your current request cannot be processed. --Sotiale (talk) 06:27, 8 February 2025 (UTC)
- Confirmed 高永文, 賽伯 and 沙漠蜻蜓
- Likely Likely 竹東阿章
Although this is very different from the original request, I understand this as a request to the local LTA and will process this request. --Sotiale (talk) 09:32, 10 February 2025 (UTC)
Rumensz@bg.wikipedia
- List of users
- Rumensz (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- Мата Космата (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
- CU log
- Discussion: wikipedia:bg:Special:PermaLink/12502598#Злоупотреба с допълнителни потребителски сметки
- Confirmed Rumensz and Мата Космата
From a technical point of view. --Sotiale (talk) 13:24, 13 February 2025 (UTC)