Wikipedia:Sockpuppet investigations/YehudaMedinaMizrahi/Archive

Evidence submitted by RolandR
Edit-warring and POV editing over the same range of articles. In particular, removing the Arabic forms of place names in Israel and Middle Eastern food, removing identification of Yemeni Jews, insisting on Israeli origin of many dishes, changing names of Middle Eastern and Latin American dance steps, and many related tendentious edits. See many edits on Malawach, Skhug, Israeli cuisine, Ukrainians, Jachnun, Sheitel, Temani (dance), Zamba, Huayño and very many others. Too many similar or identical edits over the same unusual range of articles for this to be coincidental. RolandR (talk) 13:04, 31 October 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments

 * The sockmaster hasn't really been active since June, though there is some overlap in previous editing. I'm fairly sure the IP and the puppet are the same based on their editing patterns (e.g. Israeli cuisine) but I'm wondering if this is just a case where an editor forgets to log in, or thought they had created an account under one name but forgot it - basically I'm not seeing any intentionally malicious sockpuppeting. Some of their edits (particularly the blanking ones) are somewhat troubling, though. —  Hello Annyong  (say whaaat?!) 14:57, 31 October 2010 (UTC)
 * I'm going to mark this for close. I really don't see any alternate account or scrutiny issues. TN X Man  19:40, 12 November 2010 (UTC)

06 January 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

The first two IPs have recently been blocked for one month for disruptive editing. The first account was edit warring in particular on Culture of Israel, as well as several articles about dance steps, Israeli cuisine, and Palestinian culture. The suspected puppeteer, the named account and the other IPs all have a long history of editing this unusual combination of articles.

A previous SPI found evidence that YM and another IP in the 24.36 range were likely puppets of YMM, but no action was taken at the time. But such abuse has continued, with suggestions that YM is logging out in order to make the same reverts as an IP.

The more I look into this, the more IPs I find that have obviously been used by this puppeteer in order to continue disruptive editing. Given the recurrence of such editing, and the blocking of two IPs for disruption, it is clear that this user is habitually using IPs in order to hide their tracks and continue edit-warring. RolandR (talk) 09:39, 6 January 2012 (UTC)
 * But the point is that this editor is edit warring from a named acount and several IPs at the same time, taking care that only the IPs get blocked so that he can continue with borderline disruption with the named account. He has already escaped sanction in the past; indeed, it was you, HA, who gave him the benefit of the doubt when I reported him a year and a bit ago. As you will see from his talk page, there are frequent concerns about his behaviour, and the IPs are constantly being blocked. Really, something needs to be done to ensure that this editor learns not to edit-war and disrupt articles. RolandR (talk) 18:48, 8 January 2012 (UTC)
 * Part of the problem is that it's such a slow burn. A few edits here and there once every few months doesn't really provide enough justification, in my opinion. —  Hello Annyong  (say whaaat?!) 19:04, 8 January 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * So it seems that the master account stopped editing under that name and switched to the new one? I think? I don't know if they tried to start clean or what, but the master has been unused for at least 18 months. That really only leaves the named sock and the two non-stale but currently blocked IPs. The whole issue of the master and the named sock being so old leaves me disinclined to block there, and given that the two IPs are blocked I think we're done here for now. Relist if there are any further developments. —  Hello Annyong  (say whaaat?!) 15:58, 8 January 2012 (UTC)

14 March 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

Same tendentious editing -- removing identification of subject as Yemeni. Like many other puppets of this puppeteer, these ISPs are located in Hamilton, Ontario RolandR (talk) 16:01, 14 March 2012 (UTC)
 * I should have pointed out that another sock,, was indefinitely blocked just two weeks ago following an ANI discussion about his continuing use of anonymous sockpuppets for tendentious editing, particularly the removal of the word "Yemeni" from many articles, including Ofra Haza. RolandR (talk) 16:51, 14 March 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Ofra Haza protected 1 week for now. -- DQ  (ʞlɐʇ)  00:19, 19 March 2012 (UTC)

20 March 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Repeating a tendentious edit made earlier this week by, another suspected sock of this disruptive editor. Like all previous IP socks, these are located in Hamilton, Ontario. RolandR (talk) 08:55, 20 March 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Dabke has been semi-protected for 2 weeks. --MuZemike 20:31, 25 March 2012 (UTC)

18 April 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

As with other socks of this serial puppeteer, making disruptive POV edits on a range of articles. This includes repeatedly removing the word "Yemeni" from articles about Yemeni Jews, removing the word "Palestinian", substituting "Middle Eastern" for "Arab", insisting on adding the Hebrew words for common Arab terms, and similar behaviour. The first IP has just returned after a one-week block for "long term abuse". Like all other IP socks of this puppeteer, these IPs geolocate to Hamilton, Ontario. RolandR (talk) 21:21, 18 April 2012 (UTC)
 * Muzemike asks below whether anything can be done, "given the small frequency of the disruption". But this is the fifth SPI I have initiated against this puppeteer in the past six months, each time meeting the same response. Over that period, I have identified 19 IP socks, as well as YMM and obvious sock . Several of these socks have been blocked for disruptive editing, only to return to the same behaviour on expiry of the block. Several articles have been semi-protected because of his continued disruption. This editor has edit warred over a range of articles, covering Yemeni culture, Albania, Israeli food, early Jewish history, dance steps, place names, and other areas. He has angered many editors involved in these separate areas, most of whom have no interest in YMM's other editing areas. He has consistently failed/refused to discuss any of his disruptive edits; I can find no contributions at all to article talk pages. Some of the edits, in particular the persistent removal of mention of Yemeni or Palestinian origins, verge on racism. So what do you propose, Muzemike? Surely you cannot be suggesting that we allow this disruption to continue. Is it possible to block all IP edits from Hamilton, Ontario (where all of these IPs are located)? Or can we just agree that this editor, and all of his socks, are banned, and simply revert on sight? RolandR (talk) 00:23, 22 April 2012 (UTC)
 * And having written the above, I have now found another registered quacking sock (added above). This needs to be dealt with. RolandR (talk) 00:31, 22 April 2012 (UTC)
 * Also, regarding "small frequency of the disruption", see for instance the revision history of Malawach. Since last July, every edit to this article has been made by YMM, using eight socks, or by numerous editors reverting him. This is extremely disruptive, and must be stopped. RolandR (talk) 21:48, 22 April 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Assuming these are from YehudaMedinaMizrahi, I'm not sure there is much we can do here aside from semi-protecting the affected articles, but I'm afraid that might be overkill, given the small frequency of the disruption. Thoughts? --MuZemike 21:33, 21 April 2012 (UTC)

This gives sufficient reason to check Sonia against February's obvious sock, YehudaMizrahi. ✅:



Blocked and. AGK [•] 23:41, 24 April 2012 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Latest of numerous IPs from Hamilton, Canada, continuing a pattern of tendentious editing for more than a decade. Mainly about Arab–Israeli conflicts, in specific articles about Middle Eastern dance and food. Looks like they changed ISP from Cogeco Cable (24.36.64.0/19 and earlier 24.36.128.0/18) to Bell DSL in early 2020 or so, same geolocation. The Bell IPs seem to stay allocated for several weeks, maybe worth blocking the latest one, 74.12.192.62.
 * Repeatedly changing "Palestine" to "Israel", "Palestinians" to "Israeli Arabs" etc., in Dabke (now page-protected for another year):
 * 74.12.192.62, yesterday:, and all their other edits.
 * 74.14.85.19, April 2020: ,
 * 74.14.85.37, March 2020:
 * 24.36.86.118 (previously-reported and blocked IP sock), 2013:, , etc.
 * 24.36.64.0/19 range, 2014–2019:, , , , , and many others.
 * In Khubz muluwah (formerly "Malawach"), repeatedly chaging "Yemeni flatbread" to "Yemenite Jewish flatbread" or changing to/adding "Israel", etc.:
 * 74.14.85.19, April 2020:
 * 24.36.87.141, 2019:
 * 24.36.91.90, 2018:
 * 24.36.75.52, 2018:
 * Confirmed sock SoniaSarkisyan, 2012:
 * Confirmed sock YehudaMizrahi, 2010:
 * 24.36.167.106, 2010, same edit:
 * YehudaMedinaMizrahi (master) 2009, same edits:
 * Repeatedly changing "Yemenite step" to "Tza'ad Temani", and removing "Yemenite":
 * 74.14.85.19, April 2020:
 * 74.14.85.37, March 2020:
 * 24.36.87.141, 2019:
 * 24.36.80.40, 2013:
 * 24.36.132.108, 2011:
 * 24.36.128.200, 2009:

There are several other typical examples, especially from 74.14.85.19. IamNotU (talk) 16:41, 11 July 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked 74.12.192.62 for a couple of weeks, but don't see much else that can be done. Maybe get aggressive about semi-protecting pages, but that's probably just playing whack-a-mole in a different dimension.  Closing. -- RoySmith (talk) 22:05, 11 July 2020 (UTC)