Jump to content
Wikimedia Meta-Wiki

Steward requests/Checkuser/2025-02

From Meta, a Wikimedia project coordination wiki
Latest comment: 20 hours ago by Sotiale in topic Requests
Warning! Please do not post any new comments on this page. This is a discussion archive first created in February 2025, although the comments contained were likely posted before and after this date. See current discussion.


Requests

Latest comment: 20 hours ago 48 comments15 people in discussion

Abu amara @ur.wikipedia

Status: Done
List of users
Abu amara (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
مشرا (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): These both users are editing same pages repeatedly despite warning to main account. I already blocked main account for removing the template of AFD. I had previous same experience on enwiki during the AFD of Sudhanoti (state). I request to verify if both are the same account. Hasan (talk) 17:04, 31 January 2025 (UTC)
  • Confirmed Abu amara, مشرا, Abdul Wah
From a technical point of view. ~ Yahya (talkcontribs) 18:33, 31 January 2025 (UTC)

Qiufenggudu@zh.wikipedia

Status: Done
List of users
Qiufenggudu (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
散打王 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): They edited the same articles (e.g. zh:楊鍾羲, zh:圖敏). 散打王 is a single-purpose account used only to revert Tisscherry's edits and counter his actions. Tisscherry removed content added by Qiufenggudu, and then 散打王 manually reverted Tisscherry's edits. We are concerned that 散打王 may be an impersonation account belonging to another vandal, so we request a check on the relationship between Qiufenggudu and 散打王. Thanks. SCP -20 00 16:10, 1 February 2025 (UTC)
  • Confirmed 蒙古天骄, 刘生堂, 散打王, 挚爱小哆, Ehrijrf, 塔林呼恒
  • Unrelated Unrelated Qiufenggudu

From a technical point of view. --Sotiale (talk) 07:18, 2 February 2025 (UTC)

Rastinition@zh.wikipedia

Status: Done
List of users
Rastinition (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )

Reason(s): User has been suspected of using multiple IP sockpuppets in antivandalism edit reversion and article cleanups while a revert ban is in place. A check is requested to confirm whether the user has been abusing IP socks.

For stewards' reference: recently rejected self-request on the same case; previously done CUs on the same basis, in case there are concerns on privacy issues – as long as IPs are not revealed or linked publicly I think it's well within acceptable CU.

Luciferian Thomas 14:12, 31 January 2025 (UTC)
Detailed evidence is in the talk page of the SPI request (here), if stews wants further information. Luciferian Thomas 14:14, 31 January 2025 (UTC)
  • Unrelated Unrelated Rastinition and Rastinitionn
  • There is no evidence to suggest that Rastinition abused non-login editing.

Note that this is conducted as an investigation to determine the relationship between Rastinition and Rastinitionn. --Sotiale (talk) 07:45, 2 February 2025 (UTC)

Ofurmeistarinn@is.wikipedia

Status: Done
List of users
Ofurmeistarinn (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Bjornkarateboy (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Doktor Möppudýr (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): User Bjornkarateboy was blocked for a month in January after a series of lesser bans for disruptive editing in the last few months. He has a history of evading blocks by using alternative accounts (see: Doktor Möppudýr) and by logging out to make edits, which he has admitted. User:Ofurmeistarinn was created last night and the edits it has made are very similar in style and language to what we have seen before from Bjornkarateboy. --Bjarki S (talk) 11:42, 3 February 2025 (UTC)
  • Confirmed Bjornkarateboy, Ofurmeistarinn, Doktor Möppudýr

From a technical point of view. --Sotiale (talk) 12:07, 3 February 2025 (UTC)

Aspectreishauntingeurope@az.wikipedia

Status: Done
List of users
Aspectreishauntingeurope (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Kromvell 1968 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Both users are working on the same articles and started their contributions on Wikipedia at almost the same time, in July 2024 ([1], deletion of the article which they have worked on and have a vested interest in, and left comments with almost identical tones and opinions in an attempt to keep the article. The account Aspectreishauntingeurope even worked on a article with the same context on his user page. However, after commenting in the discussion, he seemingly tried to avoid possible conflict of interest concerns by replacing the page’s content with a template. Sura Shukurlu (talk) 19:37, 4 February 2025 (UTC)
It's unclear if this request is for azwiki or for enwiki. The language code parameter in the template says azwiki, while the header says enwiki. Could you clarify? If this is a request for enwiki this should instead be referred to local checkusers, see en:WP:SPI. EPIC (talk) 19:54, 4 February 2025 (UTC)
EPIC, It is for azwiki. --Sura Shukurlu (talk) 20:03, 4 February 2025 (UTC)
@Sotiale, Hi. Can you please take a look? Sura Shukurlu (talk) 07:16, 5 February 2025 (UTC)
w:Wikipedia:Sockpuppet investigations/Aspectreishauntingeurope Nemoralis (talk) 09:41, 5 February 2025 (UTC)
Considering that the two were marked as unrelated at enwiki, I don't see much reason to perform a local check, unless there have been any signs of sleepers. EPIC (talk) 10:04, 5 February 2025 (UTC)
On July 24, 2024, Kromvell 1968 wrote on the Village Pump of azwiki, asking how to move the Nargiz Absalova article, which he had worked on it, from draft status to the main space. However, upon reviewing the user's contributions, there is no record of him editing such an article on that date or in the surrounding period. Looking at the history of the now-deleted draft subpage of user Aspectreishauntingeurope (since I am sysop in azwiki, I have rights to view deleted revisions), it is evident that the Nargiz Absalamova article was written in that draft on July 23, 2024—one day before the inquiry was made. This suggests that the person may have worked on the article using a different account and then inquired about it the next day with another account. In the same inquiry, Kromvell 1968 also mentioned that he was working on the Akif Gurbanov article at that time and he would be creating articles for similar individuals. Shortly afterward, on August 17, 2024, Aspectreishauntingeurope improved and expanded the Akif Gurbanov article. Additionally, similar articles were created or expanded by Aspectreishauntingeurope both on azwiki and enwiki following this inquiry, not by Kromvell 1968. Another noteworthy detail is that, in the same inquiry on the Village Pump, Kromvell 1968 referred to the user who created the Nargiz Absalamova article on enwiki (Aspectreishauntingeurope) as "our friend" and stated, "we submitted the article on enwiki first, and they accepted it." Sura Shukurlu (talk) 11:38, 5 February 2025 (UTC)

The remaining data on azwiki does not seem to be much different from that on enwiki. Therefore, it would be difficult to see them as the same user. --Sotiale (talk) 07:59, 6 February 2025 (UTC)

Stalin kzj@zh.wikipedia

Status: Withdrawn
List of users
賽伯 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Rastinitionn (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Similar editing behavior in editing Taiwanese Universities. Local discussion also speculate that potential logout edits have occurred (that is, IP sock editing through school IPs). A sleeper check is requested. Thanks in advance. If stewards happen to have a hold of previous data of Stalin kzj for comparison would be greatly appreciated as well since the behavior pattern is similar. Last check for Stalin kzj: Special:diff/27320881. {\displaystyle \int } {\displaystyle \int }() 20:07, 6 February 2025 (UTC)
Can you explain which edits of Rastinitionn are relevant to Taiwanese Universities? Rastinitionn's edits appear to be edits to the drama. --Sotiale (talk) 13:05, 7 February 2025 (UTC)
The original text concept I reported at that time was "Special:CentralAuth/賽伯 and Special:CentralAuth/Rastinitionn both established en.wikipedia.org and ko.wikipedia.org accounts." My thought is that he is a person with "cross-wiki" activity habits, and it may be difficult to achieve a high degree of similarity in the scope of activities between different people.(But I also noted that why Special:CentralAuth/賽伯 followed ko.wikipedia.org. This record could hardly be found in his other past accounts.)Another reason is that of all the people who have impersonated me in the past, he has been the most frequent, or almost the only one who has tried to impersonate me.For me,Wikipedia:傀儡調查/案件/Stalin_kzj#2025年1月6日 was sent on January 6, and the account impersonating me was established and active on January 7. Is this too much of a coincidence?
Rastinition (talk) 14:01, 7 February 2025 (UTC)
Request withdrawn. Different editing behavior to form reasonable doubt. See amendment below. -- {\displaystyle \int } {\displaystyle \int }() 22:14, 7 February 2025 (UTC)
While the stewards are responsible for conducting their own investigation, stewards primarily trust the clerk team's word to understand the request. Therefore, mistakes like this one can make other stewards more cautious in handling requests. I believe you know this without me having to repeat it again, but I ask that you carefully review the content when posting to SRCU. Thank you! --Sotiale (talk) 06:24, 8 February 2025 (UTC)

Z3578128274@zh.wikipedia

Status: Done
List of users
Renamed user 8b9268103c011759bb2d2c14671bcc3a (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Stelle2000 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Please note that Renamed user 8b9268103c011759bb2d2c14671bcc3a = Z3578128274. That account is renamed during the process of local SPI discussion. Shortly after a draft about rail systems was deleted (zh:Draft:阿米诺斯铁路系统), Stelle2000 submitted a request on local Deletion Review for the deletion to be reversed while Z3578128274 copied the content of the draft to his or her user page, self-reverted afterwards. A check is therefore requested; thanks in advance. cc renamer @Robertsky:. {\displaystyle \int } {\displaystyle \int }() 22:25, 7 February 2025 (UTC)
@ATannedBurger thanks for the update, and apologies if it causes more work to check through the CU. I am not sure how the SPI message escaped my attention when I checked on the user before approving it earlier, except that the timestamp between when the SPI message on the talk page and my logged action was quite close to each other. Robertsky (talk) 00:34, 8 February 2025 (UTC)
  • Confirmed Stelle2000, Renamed user 8b9268103c011759bb2d2c14671bcc3a

--Sotiale (talk) 06:39, 8 February 2025 (UTC)

Sura Shukurlu@az.wikipedia

Status: Done
List of users
Sura Shukurlu (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): The user is making these (1, 2) types of meaningless edits to pages. Also deleting content. Please check if the account has been hacked. Turkmen talk 20:52, 8 February 2025 (UTC)
Noting that I already performed this check on a private request at the same time as this request was posted. I'll note here publicly as well that this is unlikely to be a compromise. With that being said I also found another related account in the check (Racobabapiro). EPIC (talk) 20:56, 8 February 2025 (UTC)
This account was registered 30 minutes ago. Now thats weird. Nemoralis (talk) 20:58, 8 February 2025 (UTC)
@EPIC, Did you check on the Azerbaijani Wikipedia or loginwiki? Can you please check on az-wiki? Turkmen talk 21:12, 8 February 2025 (UTC)
I did check on azwiki (the account would either way be too old to be checked on loginwiki), and my conclusion is based on the data obtained from that local check. EPIC (talk) 21:13, 8 February 2025 (UTC)
@EPIC, can we look at UA access dates? Nemoralis noted the UA difference. Turkmen talk 21:21, 8 February 2025 (UTC)
The technical data for the two are somewhat different, but there are signs indicating the two are related. Now, the account has no local edits, however, so it's ultimately up to azwiki how to handle it. I would perhaps wait for a potential explanation unless any edits do come from the account in question. EPIC (talk) 21:28, 8 February 2025 (UTC)
Thank you for your attention. Turkmen talk 21:57, 8 February 2025 (UTC)
@EPIC, @Nemoralis, @Turkmen, I sincerely apologize to each and every one of you for the inconvenience I have caused. Just a while ago, I experienced a huge shock myself. My hands are still shaking. A thousand thoughts ran through my mind, and I still haven't fully recovered. At first, I thought I was under a systematic hacker attack. When I opened WhatsApp, I saw that even the messages I hadn’t read were marked as read, which made me extremely anxious. I tried to freeze my bank cards and etc. I really appreciate that you acted quickly as well. However, the reality turned out to be much simpler. I sincerely apologize, but I have been victim to my little brother and four other mischievous young guests who are currently at our home. Normally, my computer is always locked, but after I stepped away for just a few minutes, these childs somehow managed to "get access" to my computer. They made edits on Wikipedia, and as if that wasn’t enough, they also used my open web WhatsApp to send random messages to groups, teachers, and other contacts. My friends called me, warning that my WhatsApp had been hacked. When I checked my phone, I witnessed everything firsthand. Then, a fellow Wikipedian contacted me, and I realized that my Wikipedia account had also been compromised. My hands are still shaking as I write this. I deeply regret all of this and sincerely apologize again to everyone. The account in question was actually created by my brother, who named it Racobabapiro (a reference to his name, Rajab). Once again, I am truly sorry for causing any distress. A thousand thoughts ran through my mind, and my entire day was ruined. I went through intense stress, and my body is still shaking. Sura Shukurlu (talk) 22:10, 8 February 2025 (UTC)
No worries, thank you for an explanation. Nemoralis (talk) 22:18, 8 February 2025 (UTC)

Stalin kzj@login.wikimedia

Status: Done
List of users
賽伯 (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Hsnudc (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): Amendment to the previous request. I have noticed that Hsnudc engaged in harrasement towards Rastinition on enwiki; both of these accounts are now locked. Per local discussion at zh.wiki in conjunction of the above request, I would like to request sleeper check on the above two accounts through login.wiki as they are both confirmed to be Stalin kzj (Hsnudc through Special:diff/26471121 and 賽伯 by duck) and lock any sleepers despite Hsnudc is stale on zhwiki. Thanks in advance. -- {\displaystyle \int } {\displaystyle \int }() 22:14, 7 February 2025 (UTC)
I would also like to side-note potential xwiki abuse for 萎靡 and GJ4899 on wikidata. Of course, it would need further investigation which I currently do not have the time to allow me to do so : /
cc @0xDeadbeef:. -- {\displaystyle \int } {\displaystyle \int }() 22:14, 7 February 2025 (UTC)
Hi. It is unclear what you are requesting. At least loginwiki probably has outdated information about Hsnudc. Therefore, your current request cannot be processed. --Sotiale (talk) 06:27, 8 February 2025 (UTC)
@Sotiale: Since Hsnudc's data on enwiki is not stale (en:Special:Contributions/Hsnudc, last edit on Feb. 4 of this year), my guess is that there will be data on login.wiki. To answer your question, this is a sleeper check. Thanks. {\displaystyle \int } {\displaystyle \int }() 06:30, 8 February 2025 (UTC)
Despite its name, loginwiki is a wiki with different functions. Therefore, there is no data there already. Since all data about them remains on enwiki, you must post a request on enwiki or otherwise be related to an account or incident on zhwiki so that the request can be processed. --Sotiale (talk) 06:37, 8 February 2025 (UTC)
@Sotiale: I understand your point. But the question I'm having now is that considering 賽伯 does not have a local account on enwiki, there will be no technical data from 賽伯 available to enwiki CUers. Especially when involving xwiki abuse, how would enwiki CUs yield results that can provide an adequate picture?
Also, despite the previous request I have determined that there are not enough evidence (considering counterarguements) to yield reasonable doubt that Rastinitionn is indeed Stalin kzj, but it may very well be from other LTAs (perhaps even Stalin kzj itself) since the impersonation rationale is there. From my understanding, impersonating Rastinition is not something only Stalin kzj would do.
If you would like to provide further comments on the "萎靡 and GJ4899 on wikidata" situation, that will be greatly appreciated as well. {\displaystyle \int } {\displaystyle \int }() 06:51, 8 February 2025 (UTC)
If 賽伯 doesn't have an account on enwiki, does that mean that this account is different from this? --Sotiale (talk) 06:56, 8 February 2025 (UTC)
Actually, I think this could be a case where a cross-wiki investigation is needed, but more information needs to be provided about this. Usually, if you can explain it to enwiki team and have the data, it can be completed there. If you think the cross-wiki investigationis necessary, you can provide me with more information. --Sotiale (talk) 07:04, 8 February 2025 (UTC)
I want to bring up 2 other things.
  1. Because we have checked zh.wikipedia.org many times and accumulated a lot of accounts. I saw that one of the accounts was found to be related to zh:LTA:KAGE [3]. Are there any other details?
  2. Is it possible to check zh.wikipedia.org to see if there are other accounts?And globally lock all accounts that are confirmed to be Stalin kzj in the present, past and future.
Rastinition (talk) 10:04, 9 February 2025 (UTC)
enwiki CU says no sleepers: en:Special:Diff/1274814590 0xDeadbeef (talk) 12:06, 9 February 2025 (UTC)
  • Confirmed 高永文, 賽伯 and 沙漠蜻蜓
  • Likely Likely 竹東阿章

Although this is very different from the original request, I understand this as a request to the local LTA and will process this request. --Sotiale (talk) 09:32, 10 February 2025 (UTC)

Rumensz@bg.wikipedia

Status: Done
List of users
Rumensz (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Мата Космата (contr · deleted · block · log · block log · guc · checkuser · lwcheckuser )
Reason(s): User has long history of blocks for incivility and disruptive behaviour, with the last one being from 29 April 2024. User is suspected for evading the block with a new account. Identical editing style and similar interests (1, 2, 3, 4), also many edits are made to pages created by the original user. Exhibited is the same pattern of disruptive behaviour, characterized by the repeated reverting of edits and the initiation of conflicts. They have begun commenting on discussion pages, which raises concerns that they may soon try to vote. Carbonaro. (talk) 13:04, 13 February 2025 (UTC)
  • Confirmed Rumensz and Мата Космата

From a technical point of view. --Sotiale (talk) 13:24, 13 February 2025 (UTC)

AltStyle によって変換されたページ (->オリジナル) /