Wikipedia:Sockpuppet investigations/Rejedef/Archive

25 October 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Rejedef was blocked indefinitely in March 2012 for persistent disruption related to Europe. Please see this ANI thread for background info and what lead to the block. Primarily, he objects to specifying any part of Europe (eg Northern Europe, Eastern Europe, etc) and commits himself to removing Northern, Eastern, Western and Southern and just leaving Europe, decapitalizing the cardinal directions so as to somehow downplay their importance, or outright renaming the location to something entirely different. See, for examples. Compare to Welshwind's edits:, and. Also, both accounts moved Eastern European cuisine to Central and Eastern European cuisine and both accounts share the same interest in European and Asian cuisine in general. Atlan (talk) 12:06, 25 October 2012 (UTC)
 * I second Atlans conclusion. I came across Welshwind at the article Tripe soups that he wanted to move from an more East-European focus to a far broader European focus. The Banner talk 12:33, 25 October 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  15:24, 25 October 2012 (UTC)
 * I agree that this looks like him and blocking & closing.

05 November 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Anonymous reincarnation of Rejedef/Welshwind. Adding/removing the same stuff to the article Tripe soups that Welshwind repeatedly did, including removal of "Eastern Europe", which is almost a Rejedef-signature. The same belittlement of Easter Europe is done at Finlandization and All Saints' Day. On top of that, some unhandy waking up of sleeping dogs by connecting himself to the Tripe soup affaire. The Banner talk 18:51, 5 November 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  05:54, 7 November 2012 (UTC)
 * Checkusers will not normally associate named accounts with specific IP addresses. Go on behaviour.  &mdash; Coren (talk) 19:04, 5 November 2012 (UTC)
 * Blocking IP one week and closing.

21 January 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Apologies for the length of this report, but it's a bit of a complicated trail.

The socks all have the same intersecting interests as the master: Poland, the geographic subdivisions of Europe and LGBT issues. The user is particularly opposed to referring to Poland as being in Eastern Europe, and often changes these references to Central Europe. (See the original blocking discussion here.)

Fənɛ́tɪks.fərɛvər has admitted to being 89.128.236.143, though this was obvious from their supporting each other here and here. The named account has resumed Rejedef's crusade against the term Eastern Europe in article titles:,. The overlap with Rejedef also includes articles such as Human rights in Poland. 89.128.236.143 and Rejedef also overlap on, for example: versus ;  versus ;  versus. 188.79.85.40 also overlaps on this last article and geolocates to Barcelona, just like 89.128.236.143. 188.79.85.40 overlaps with 89.128.236.143 on articles such as Pierogi. 188.79.39.190 is in Barcelona as well, and overlaps with 81.100.242.0: versus.

131.251.133.25 and 81.100.242.0 are clearly the same person. Both geolocate to Cardiff (as does 131.251.133.27, which has a similar MO) and here 131.251.133.25 modifies and signs a post by 81.100.242.0. And again here and here. Here 131.251.133.25 reposts the exact same comment on another page. A few months later, 89.128.236.143 returns and modifies and signs the same comment, and reposts the exact same comment on other pages. 89.128.236.143 also uses the same peculiar terminology ("abuse" versus here) as 81.100.242.0 to describe wikipedia's use of the UN geoscheme. Both 89.128.236.143 and 131.251.133.25/81.100.242.0 WP:CANVASed numerous places when arguing against the United Nations geoscheme:, , , , , , versus , , ,.

Another common feature of the socks is their repeated citing of an obscure UN working paper (http://unstats.un.org/unsd/geoinfo/UNGEGN/docs/23-gegn/wp/gegn23wp48.pdf) and pushing for its usage rather than the well established geoscheme of the UN Statistics Division:, , ,.

131.251.133.25 and Rejedef overlap on Talk:Eastern Europe, and with 194.181.135.162 (a blocked sock): versus.

81.100.242.0 is also clearly, a blocked sock of Rejedef. Compare versus. 89.128.236.143 has also taken an interest in Regional power:.

89.128.236.143, 81.100.242.0 and Rejedef all overlap on Regions of Europe: //.

The independent overlapping interest in LGBT issues by most of the socks probably seals the deal:, , , , ,.

Martina Moreau cites a comment by 81.100.242.0. Overlap with Rejedef includes: versus. The user is also interested in LGBT issues:. Martina Moreau stoped editing a few weeks before 89.128.236.143 became active and Fənɛ́tɪks.fərɛvər started editing. 188.79.39.190 (one of the Barcelona IPs) is clearly tied to Martina Moreau as it responds to a message on their userpage, contributes to an AN dispute they were involved in, and continues their edit war.

A checkuser will be helpful to compare Martina Moreau with Fənɛ́tɪks.fərɛvər, though obviously won't be able to be used for the IPs. The latter five IPs are too stale to do anything about, but I felt that it was a good idea to put them on the record to help clarify the picture and also to help with future investigations.

You seem to have been involved with this user in the past, so your evaluation of the evidence would be helpful. TDL (talk) 05:56, 21 January 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  19:41, 27 January 2014 (UTC)
 * - on named accounts for confirm. Archives are stale though. Rschen7754 09:19, 26 January 2014 (UTC)
 * The following are ✅ matches to one another:
 * . ​—DoRD (talk)​ 17:45, 27 January 2014 (UTC)
 * Indeffing socks with tags and closing.
 * . ​—DoRD (talk)​ 17:45, 27 January 2014 (UTC)
 * Indeffing socks with tags and closing.
 * . ​—DoRD (talk)​ 17:45, 27 January 2014 (UTC)
 * Indeffing socks with tags and closing.

01 February 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

blocked 89.128.236.143 for a week on the 27th as a sock, but for some reason they can still edit even though the week hasn't expired. Is there some reason for this that I'm missing, or is this a bug that needs to be raised at WP:VPT? The IP has resumed the same edits as past socks, ie restoring edits by past socks:. Edits such as this make it clear that Rejedef has been using this IP for more than a month, so a longer block of the IP is probably necessary. TDL (talk) 00:21, 1 February 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This is really strange, I'm not sure what caused that. I reapplied the block, so I guess we'll see if it works this time. I suppose we'll have to take this to VPT if it doesn't work again. Mark Arsten (talk) 01:01, 1 February 2014 (UTC)

09 February 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Per WP:DUCK Werieth (talk) 08:22, 9 February 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

The IP is a duck alright, and having already blocked a paddling of ducks, I semi'ed the article. 12 minutes later, MagenUK was created and started an avalanche of edits on the usual theme of purging Wikipedia of the term "Eastern Europe", including. I have therefore added said account to the list of suspects. Favonian (talk) 12:11, 9 February 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  14:22, 9 February 2014 (UTC) — Berean Hunter   (talk)  14:31, 9 February 2014 (UTC)
 * Indeffing sock and blocking IP 2 weeks. Closing.
 * I also found 89.128.236.143 from the archive and hardblocked this for one year as he was/is static there for at least two months.

27 February 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

All have resumed Rejedef's war on geography. 82.127.189.107 showed up again posting the same rant as past socks. 82.127.189.107 also responds to a comment on the talk page of 95.19.107.64, who is blocked as a sock of User:LGBT Index. LGBT Index has a spamusernameblock, but it is probably worth tagging and changing the block rational. Also, Sockpuppet investigations/LGBT Index should be merged here. Most of the IPs are stale or blocked, just including them here for future reference. Since the user has a history of sleepers, it's probably worth a check on LGBT Index. TDL (talk) 06:48, 27 February 2014 (UTC)


 * What further information is required? Do the diffs provided above not make it clear on behavioural evidence alone that LGBT Index is Rejedef?  I believe that the edits made by 82.127.189.107 demonstrate that the two accounts are operated by the same person.  This and this edit also tie the LGBT Index socks to the Rejedef socks by responding to threads initiated by Rejedef.  (One of Rejedef's primary interests is LGBT issues: .)  I'm not asking for a CU to confirm the link between the named account and the IPs or past socks (since I think these are WP:DUCKs), but I think that given that this user is a long-term sock abuser, it's worth checking LGBT Index for other sleepers.  TDL (talk) 05:30, 2 March 2014 (UTC)
 * But again, based on the diffs above, the connection between the named accounts seems crystal clear: they both socked using the exact same IP. If userA socks with IP1 and userB socks with IP1, how much clearer could the connection between userA and userB possibly be?  They're both editing from IP1!  TDL (talk) 06:07, 2 March 2014 (UTC)
 * Yes, I have shown that directly above. That was the entire point of my original post: 82.127.189.107 is being used by both users.  As all of your responses have just been boilerplate, rather than explanations of what it is about the connection you don't understand, it is awfully hard for me to guess what "more info" you want.  So rather than more questions and more boilerplate responses, here is a comprehensive analysis of the info above, with even more diffs.  Hopefully this removeas any doubt about the connection:


 * : post in a thread complaining to User:Cindamuse about the deletion of LGBT Military Index, which was created by LGBT Index.
 * blocked as a sock of LGBT Index.
 * I think that it is clear that 95.19.107.64 is being used by LGBT Index.
 * : This edit, in a thread about an update to 2014 data, is on the same page as this by a blocked sock of Rejedef about a 2013 update.
 * I think that it is clear that 95.19.107.64 is being used by Rejedef.
 * Thus, 82.127.189.107 is being used by both Rejedef and LGBT Index.
 * Thus, 82.127.189.107 is being used by both Rejedef and LGBT Index.


 * : Shorty after the block of 95.19.107.64, this IP replies to a notice about a SPI on 95.19.107.64's talk page.
 * Hence, 82.127.189.107 is almost clearly LGBT Index.
 * : This post resumes Rejedef's crusade against the UN Geoscheme. See these edits by blocked socks of Rejedef for comparison:, , ,
 * : resumes edit war started by blocked sock of Rejedef.
 * : This edit follow many by blocked socks of Rejedef on this page, ie
 * Hence, it seems clear that 82.127.189.107 is Rejedef.
 * Thus, 82.127.189.107 is being used by both Rejedef and LGBT Index.
 * Thus, 82.127.189.107 is being used by both Rejedef and LGBT Index.


 * : complains about LGBT Index's article being deleted.
 * I think that it is clear that 95.19.107.64 is being used by LGBT Index.
 * : Same as 95.19.107.64, this edit, in thread about an update to 2014 data, is on the same page as this by a blocked sock of Rejedef about a 2013 update.
 * : Same as 82.127.189.107, this edit follow many by blocked socks of Rejedef on this page, ie.
 * I think that it is clear that 95.19.107.64 is being used by Rejedef.
 * Thus, 194.181.135.164 is being used by both Rejedef and LGBT Index.
 * Thus, 194.181.135.164 is being used by both Rejedef and LGBT Index.


 * Do you see the connection now? If not, can you please be clear about which part of the connection you would like more evidence for?  Again, I'm not asking for a CU to check the two accounts against each other.  (I'm sure there will be none, as the user moves around a lot.)  I think these are WP:DUCKs.  The CU is only to look for sleepers.  TDL (talk) 07:38, 2 March 2014 (UTC)

Comments by other users
Please add IP 31.51.19.223 to the list. The incorrect rendering of my name has only occurred when being addressed by the contributor, per this edit, tallying with IP 94.118.41.74's rendering. Thank you. --Iryna Harpy (talk) 23:54, 27 February 2014 (UTC)
 * I've tagged them all as suspects; will update tags after CheckUser results come back. All suspects have been informed on their talk pages of this investigation. —  This lousy T-shirt — (talk) 15:26, 28 February 2014 (UTC)

''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Need more info on the named account, since that is all that can be checked. Rschen7754 04:20, 2 March 2014 (UTC)
 * We need a clearer connection between the named users than the diffs that you have provided to justify running a check. I'm afraid that this will have to be declined if you are unable to provide more information. --Rschen7754 05:33, 2 March 2014 (UTC)
 * - Well, you haven't even prove that they're both socking using the same IP, so declined. Rschen7754 06:11, 2 March 2014 (UTC)
 * - - Thank you for providing clear evidence. Endorse for a sleeper check. Rschen7754 07:43, 2 March 2014 (UTC)
 * ✅. No sleepers that I can find. Reaper Eternal (talk) 10:25, 17 March 2014 (UTC)
 * Account blocked and tagged. Non-stale IPs are blocked. Closing. Callanecc (talk • contribs • logs) 05:00, 18 March 2014 (UTC)

14 July 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Has resumed Rejedef's long-term war on geography, pushing the view that Poland isn't in central europe. Compare with. Also an overlapping interest in LGBT in Poland: vs. TDL (talk) 14:53, 14 July 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I realize the IPs' edits were fresh when you filed this, but they haven't been back since. So, I'm taking no action. Nor am I saying they are not socks.--Bbb23 (talk) 19:38, 19 July 2014 (UTC)

14 September 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Has resumed Rejedef's war on geography and interest in LGBT issues. Overlap with past socks includes versus. Compare this and this with this. The IP geolocates to Cardiff, as do past reported IPs. The second IP is almost certainly Rejedef, but it's stale so just including it here for future reference. TDL (talk) 18:07, 14 September 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Too stale to action upon. -- DQ   (ʞlɐʇ)  23:16, 11 October 2014 (UTC)
 * Just a quick note before I archive this case. 141.70.80.5 is no longer stale as I write this, but his latest edit doesn't seem in line with previous behavior of this master, so I'm taking no action.--Bbb23 (talk) 13:10, 12 October 2014 (UTC)

13 November 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP geolocates to Cardiff, as do past socks. Multiple overlapping interests including international rankings/maps ( vs ), Eastern European geography ( and vs ), Poland and LGBT issues. TDL (talk) 22:46, 13 November 2014 (UTC)
 * Compare this with this. TDL (talk) 20:02, 14 November 2014 (UTC)
 * Or this with this. TDL (talk) 21:24, 21 November 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * As the IP looks fairly static, I've blocked it for 3 months. Mike V  •  Talk  23:03, 24 November 2014 (UTC)

25 November 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Too much overlap with last IP sock, including fulfilling their own edit requests. Compare vs ;  vs ;  vs ;  vs. TDL (talk) 00:29, 25 November 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the account as well, given the provided behavioral evidence. Mike V  •  Talk  21:14, 25 November 2014 (UTC)

13 March 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP was previously blocked as a sock of User:Rejedef, and is now back making same disruptive edits to Eastern Europe and LGBT articles. Compare vs ;  vs ;  and  vs  and. Notice in the last case the use of the site http://www.unhcr-centraleurope.org/. TDL (talk) 15:21, 13 March 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Given that the same IP is editing the same material, I'm pretty sure that it's a fairly static address. I've issued a 6 month block. Mike V • Talk 00:09, 14 March 2015 (UTC)