Wikipedia:Sockpuppet investigations/ElPilotoDi/Archive

Evidence submitted by Explicit
I'm not familiar with this user at all, so on behalf of, I've initiated this SPI case as ElPilotoDi seems to be socking with old accounts, as well as new ones (I'll be asking Legolas2186 to submit any further evidence, as he's more familiar with the user and my evidence is terrible). ElPilotoDi has previously socked before, see. All accounts appear to share an interest with Madonna-related articles. Requesting CheckUser to possibly verify these socks, search for sleepers and block the underlying IP, if these are in fact sockpuppets. — ξ xplicit  05:33, 21 July 2010 (UTC) —  ξ xplicit  05:33, 21 July 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Comments by other users
Comment by Legolas These are all the same sockpuppets of ElPilotoDi. My suspicions arose when both the accounts started adding a poster on teh article Confessions Tour, the poster which was previously deleted. I did a check of their contributions and both JulietteLewis and El javo seems to be uploading the same copy violating images and the same poster File:Confessions Tour Poster.jpg. My suspicions was also confirmed when El javo edited the Madonna article The Girlie Show World Tour, adding another poster and an IP, starting with 201.153.2* started editing on it. This range of IP has previously been known to be used by ElPilotoDi, alongwith 189.2* series of IPs. ElPilotoDi's socking is getting a serious issue now I believe. --Legolas ( talk 2 me ) 09:21, 21 July 2010 (UTC)

Clerk, patrolling admin and checkuser comments
I found a fair bit of contradictory information when performing these checks. I'd like another checkuser to take a look at it. --Deskana (talk) 21:08, 24 July 2010 (UTC)


 * Based on technical and behavioral evidence, the following accounts are likely related:

-- Avi (talk) 03:10, 25 July 2010 (UTC)
 * There is just enough behavioral and technical evidence to show that the 4 accounts are operated by the same person. All blocked. ( X! ·  talk )  · @251  · 05:01, 25 July 2010 (UTC)

10 July 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

ElPilotoDi was indefinitely blocked by admin, for continuously uploading non-free images without any discussion, on the Madonna articles. After the block he came through numerous other avatars that were so WP:DUCK that they didn't even warranty a case to be filed in SPI. Now, MindyHall started editing few months ago, and started changing images in the Madonna articles, without any edit summary as to why he/she was doing it. I got a little suspicious and waited for the opportunity to see if it was a puppet. Today, the user uploaded a number of high-quality album covers and added them to the Madonna articles, even if they already had an existing non-free image. This confirmed my suspicions that it is indeed a sock of ElPilotoDi. A CU would be welcome to put the nail on the coffin for a final time. — Legolas ( talk 2 me ) 04:50, 10 July 2011 (UTC)

Confession What do you do when a sock confesses to the socking? — Legolas ( talk 2 me ) 03:44, 11 July 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - All accounts, including those in archives, are too for a checkuser to be of any use here. Behaviour-wise, at this time, there's definitely the potential for this user to be the same as previous accounts. The username is somewhat similar to previous accounts such as, and editing interests are similar, mostly focused on Madonna, however I have noticed other areas of interest in music. It just doesn't feel quite right to me. As obviously I cannot take any action here I'd be leaving it to someone else, but I think the best course of action might be to wait and see what happens, delete any non-free images they upload that aren't used in any articles, and go from there. Obviously if others feel otherwise, feel free to act, but to me it feels like this user is one who has a strong interest in music (though have contributed to other articles) but possibly not the same as the sock master.  Steven Zhang  The clock is ticking....  11:08, 10 July 2011 (UTC)
 * Hmm, that does simplify things a lot. Whether they can be given a second chance here is something I think we have to consider. While we could easily just block them, the chances are they're going to come back later anyways. Comments like this somewhat lead me to believe that they do want to do better, and I don't personally think that giving them a last chance would be that bad. Blocks are cheap, after all, and if issues were to re-arrise after giving them this final chance, blocking would be easy. Steven Zhang  The clock is ticking....  11:27, 11 July 2011 (UTC)
 * I'm willing to adopt him/her and guide him/her through NFCC and its do's and don'ts, provided that for the next two months the user does not upload a single image without my supervision, and the user needs to come back through the original account. Would you as an admin ask him/her regarding this? This is probably his/her last chance and I'm willing to trust in this case. — Legolas ( talk 2 me ) 14:09, 11 July 2011 (UTC)
 * Blocked and tagged. -- DQ  (t)   (e)  14:51, 16 July 2011 (UTC)

15 July 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

This is a clear case of WP:DUCK. The account, suddenly uploading images on top of the Madonna album/single images, after the previous sock MindyHall confessed to sockpuppetry and ceased to edit on July 11th. I wanted to give the user a chance, but I've had enough of this crap. CU and block all the socks please. — Legolas ( talk 2 me ) 04:08, 15 July 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Yeah, there are definitely similarities here, enough so to warrant a check user between the two. I'm a little concerned here though, see, this account was created on October 11, 2010, with MindyHall created on October 19, 2010. I've got a feeling they've possibly got a substantial sock farm, these socks were created just a few weeks after the previous SPI case. The issue will obviously be that if these socks have not edited yet, there will be no way of finding out at this time. But we can at least have a look and see what we find. Steven Zhang The clock is ticking....  08:15, 15 July 2011 (UTC)
 * is the same as, but there does not appear to be any other accounts. TN X Man  13:05, 15 July 2011 (UTC)
 * You can find out who the socks are, block these ones, the other socks immediately starts editing. I'm sorry but this has gone on enough. Every time I believed that the user would learn from the mistakes, but its the same thing. — Legolas</i> ( talk 2 me ) 14:38, 15 July 2011 (UTC)

27 August 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

A case of WP:DUCK I believe. Seems like even after catching the numerous socks and the image related vandalisms of this user, he/she still believes that we won't be able to catch him/her. — <i style="color:blue;">Legolas</i> ( talk 2 me ) 07:01, 27 August 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Eh.. maybe. I'll endorse to find out. —  Hello Annyong  (say whaaat?!) 14:03, 27 August 2011 (UTC)
 * However, this is ❌ to the indicated master; MaterialGirl et al. are editing from a different country and use different operating systems. <em style="font-family:Bradley Hand ITC;color:blue">Hers <em style="font-family:Bradley Hand ITC;color:gold">fold  (t/a/c) 16:42, 27 August 2011 (UTC)
 * OMG Hersfold this creates a much bigger problem! Two of these users I know them personally (Bluesatellite and Baratayuda) from a long time and have seen their edits. I cant believe CU returned them with the proposed sock. I don't know what to say! — <i style="color:blue;">Legolas</i> ( talk 2 me ) 17:49, 27 August 2011 (UTC)
 * Well, that's disappointing. I've blocked Bluesatellite for a few days as the master, and all the others as their socks. I've also started a new case here. —  Hello Annyong  (say whaaat?!) 18:36, 28 August 2011 (UTC)
 * However, this is ❌ to the indicated master; MaterialGirl et al. are editing from a different country and use different operating systems. <em style="font-family:Bradley Hand ITC;color:blue">Hers <em style="font-family:Bradley Hand ITC;color:gold">fold  (t/a/c) 16:42, 27 August 2011 (UTC)
 * OMG Hersfold this creates a much bigger problem! Two of these users I know them personally (Bluesatellite and Baratayuda) from a long time and have seen their edits. I cant believe CU returned them with the proposed sock. I don't know what to say! — <i style="color:blue;">Legolas</i> ( talk 2 me ) 17:49, 27 August 2011 (UTC)
 * Well, that's disappointing. I've blocked Bluesatellite for a few days as the master, and all the others as their socks. I've also started a new case here. —  Hello Annyong  (say whaaat?!) 18:36, 28 August 2011 (UTC)
 * OMG Hersfold this creates a much bigger problem! Two of these users I know them personally (Bluesatellite and Baratayuda) from a long time and have seen their edits. I cant believe CU returned them with the proposed sock. I don't know what to say! — <i style="color:blue;">Legolas</i> ( talk 2 me ) 17:49, 27 August 2011 (UTC)
 * Well, that's disappointing. I've blocked Bluesatellite for a few days as the master, and all the others as their socks. I've also started a new case here. —  Hello Annyong  (say whaaat?!) 18:36, 28 August 2011 (UTC)

22 September 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

WP:DUCK — <i style="color:blue;">Legolas</i> ( talk 2 me ) 04:25, 22 September 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Care to explain for those of us who are on the first time hearing baout the sock? -- DQ  (t)   (e)  11:22, 22 September 2011 (UTC)
 * DQ, I think this is based on their edits at Fangoria (band), as well as similar topics (that article and Madonna). I've blocked and tagged per WP:DUCK. In the future, Legolas, please give more of an explanation. —  Hello Annyong  (say whaaat?!) 00:31, 23 September 2011 (UTC)

03 December 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

The same evidence of uploading non-free album covers and images for the articles pertaining to Madonna, even when asked countless times not to do so. Plus, confirmed about this sockpuppeting in my mail-box by posting a message about coming back, if Wikipedia is not giving him/her a chance to upload his/her images. — <i style="color:blue;">Legolas</i> ( talk 2 me ) 02:29, 3 December 2011 (UTC)


 * The user is going on adding the same images over and over again. On top of that, an admin has mistakenly deleted the previous image as orphaned for seven days. This makes things complicated. :( — <i style="color:blue;">Legolas</i> ( talk 2 me ) 04:12, 3 December 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - isn't stale, so I think we can run a check there. This could also be Bluesatellite, for what it's worth. —  Hello Annyong  (say whaaat?!) 04:36, 3 December 2011 (UTC)

✅. Also,
 * and

is also controlled by the same person, but is usernameblocked already. . J.delanoy <sup style="color:red;">gabs <sub style="color:blue;">adds  04:52, 3 December 2011 (UTC)


 * Just confirmed that its using this IP) listed above. The 189.** IPs were used by ElPilotoDi socks before also. Please block this sock and get it over with. I'm sick to the stomach. I will be forwarding the mails to ANI. — <i style="color:blue;">Legolas</i> ( talk 2 me ) 05:02, 3 December 2011 (UTC)
 * HelloAnnoying, I don't think Bluesatellite is linked to this in any way. However, all the four listed and found by you through CU has to be socks. ElPilotoDi socks all have the same characteristics. Two distinct names joined together to make an username. Also, once we block these socks, other socks immediately become active. — <i style="color:blue;">Legolas</i> ( talk 2 me ) 05:15, 3 December 2011 (UTC)
 * Blocked and tagged. - F ASTILY  (TALK) 06:52, 3 December 2011 (UTC)


 * Everyone's been blocked and tagged, so we're done. —  Hello Annyong  (say whaaat?!) 18:03, 3 December 2011 (UTC)

09 February 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

(entry on behalf of User:Legolas2186) Berbah continuously uploads images without any summaries (see the user talk page), mainly for articles about Madonna and replaces completely valid images with those (unsourced and unlicensed) files uploaded by him. The user was once blocked for 48 hours for ignoring image upload warnings. The new account appears to also edit other music articles, but still edits and uploads Madonna files. —<font size="2" face="Times New Roman" color="black"> WP: <font color="#0075FF">PENGUIN  · [ TALK ]  18:40, 9 February 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Berbah appears ❌ to previous accounts. TN <b style="color:midnightblue; font-size:larger;">X</b> Man 19:38, 9 February 2012 (UTC)
 * - What about (sleeper check too please) - Exact same long NFCC rationale and probally more similiar. --  DQ  (ʞlɐʇ)  21:52, 9 February 2012 (UTC)
 * They also appear ❌. TN <b style="color:midnightblue; font-size:larger;">X</b> Man  22:00, 9 February 2012 (UTC)
 * Closing with no action taken. —  Hello Annyong  (say whaaat?!) 21:20, 12 February 2012 (UTC)

30 April 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

VernitaG's edits are similar to those of. For the IPs, use to revert IPs from Mexico, as their edits were always similar (changing Madonna images). Tb hotch .™ Grammatically incorrect? Correct it! See terms and conditions.  19:49, 30 April 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
All of the accounts in the archive appear, so there's nothing to which I can compare VernitaG. As for the IPs, checkuser generally do not disclose connections between IPs and named accounts. TN <b style="color:midnightblue; font-size:larger;">X</b> Man 20:17, 30 April 2012 (UTC) Once the history of various past sockpuppets is considered, VernitaG is pretty clear, and I have indef-blocked. The IPs are nowhere near so certain, so I am leaving them. JamesBWatson (talk) 12:40, 15 May 2012 (UTC)

2 July 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

LobitaMontoya edits are similar to those of and. Tb hotch .™ Grammatically incorrect? Correct it! See terms and conditions.  04:42, 2 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Behavior indicates a possible connection. LobitaMontoya also focuses on the same article subset (mainly Madonna-related articles and images) and the majority of their admittedly low edits took place after the block of VernitaG. CU could confirm the connection as well as look for any sleepers the master may have. Regards, <b style="color:green;">MacMed</b><sup style="color:red;">talk <sub style="color:black;">stalk 19:38, 2 July 2012 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * . Please explain how they are similar, using at least one diff for each account to support your position. It's not up to us to retrieve the evidence for you. WilliamH (talk) 07:34, 5 July 2012 (UTC)

✅ plus:



--MuZemike 23:11, 10 July 2012 (UTC)

1 September 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Their edits are similar to those of and the other socks. <font face="" color="#000066">11Jorn <font face="Calibri" color="black">talk 18:16, 1 September 2012 (UTC)


 * Well... They are constantly changing Madonna images and "are" reverting my edits 1, 2 to their images. Vuvuzuela is always uploading new Madonna's new covers. The master one is alternating his suspected socks to answer me on my talk page. Hurticles created one more account, with the same name, in capitals. I also think their saying are similar. <font face="" color="#000066">11Jorn <font face="Calibri" color="black">Time goes by so slowly 20:37, 3 September 2012 (UTC)


 * The first listed sock changed images of Madonna's articles again: 1. As QueenRapsheeba was blocked to be his sock, he is trying to put QueenRapsheeba's uploaded images on Commons into articles. <font face="" color="#000066">11Jorn <font face="Calibri" color="black">Time goes by so slowly 21:03, 3 September 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . Are they? Where? Please include at least one diff from the master and one from the account you believe is a sock. It's not up to us to retrieve your argument for you. WilliamH (talk) 16:20, 3 September 2012 (UTC)
 * - The IP and Hurthicles seem linked, and there are several differences in attitude from the master and this sock, but they look strained and artificial. There is a reasonable chance we are looking on socks based on more subtle behavior after digging into the previous socks, enough I think to justify a closer look. Dennis Brown -  2&cent;    &copy;   Join WER 14:41, 6 September 2012 (UTC)

-- DQ  (ʞlɐʇ)  05:41, 8 September 2012 (UTC)
 * Socks bagged and tagged. IP hardblocked 2 weeks. T. Canens (talk) 08:06, 8 September 2012 (UTC)

21 September 2012
The first one reverted two edits of mine to those of the previous socks, after that the second one came to my talk page, saying me to stop. I'm a little confused. <font face="" color="#000066">11Jorn <font face="Calibri" color="black">Time goes by so slowly 00:54, 22 September 2012 (UTC)
 * Suspected sockpuppets

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This case was never seen because it wasn't properly filed, but since the IPs are stale or already blocked, no action is required. ​—DoRD (talk)​ 02:18, 8 October 2012 (UTC)

8 October 2012

 * Suspected sockpuppets

Same pattern as ElPiloto, the Ip needs to be blocked Tb hotch .™ Grammatically incorrect? Correct it! See terms and conditions.  01:19, 8 October 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. ​—DoRD (talk)​ 02:18, 8 October 2012 (UTC)

14 October 2012

 * Suspected sockpuppets

The IP is the same user as, the user, on the other hand, uploaded an image, in the same pattern as EPD. Any admin can compare the image uploaded by SDSH, with other images previously uploaded and deleted (see logs). Also compare the editing of. Considering that the account took ten days to edit, there is a chance to have sleeper accounts. Tb hotch .™ Grammatically incorrect? Correct it! See terms and conditions.  04:35, 14 October 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Courcelles already got him and his sleepers. -- DQ  (ʞlɐʇ)  09:41, 14 October 2012 (UTC)
 * I've now tagged SpongeBob, er, you know who. De728631 (talk) 14:21, 14 October 2012 (UTC)

8 September 2013

 * Suspected sockpuppets

Piloto is obsessed with the replacement of valid images upload of png images, , 5, or replace the current images with the images he uploads , and request the image he replaced for deletion.. For example at File:Madonna - Like a Prayer.jpg, which is upload-protected due to this person.

A CU may be needed as Piloto tends to create multiple accounts. Tb hotch .™ Grammatically incorrect? Correct it! See terms and conditions.  20:20, 8 September 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

As part of this investigation, can a SPI clerk of CU please verify that I am not a SP of ElPilotoDi. Thanks in advance. -- Тимофей ЛееСуда . 20:32, 8 September 2013 (UTC)
 * Piloto lives in Mexico, so unless you are living here as well, sorry for the misunderstood. Tb hotch .™ Grammatically incorrect? Correct it!  See terms and conditions.  20:39, 8 September 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * is a match to Cooljules73, but since all known socks are, behavior will have to be the determining factor. ТимофейЛееСуда has not been checked. ​—DoRD (talk)​ 12:53, 9 September 2013 (UTC)
 * He admitted it in my talk page. Tb hotch .™ Grammatically incorrect? Correct it!  See terms and conditions.  02:29, 10 September 2013 (UTC)
 * Blocked & tagged. Tiptoety  talk 05:53, 10 September 2013 (UTC)


 * DoRD, just for clarification's sake, when you said LuxiromChick was "a match to Cooljules73", did you confirm this via a CU check, or did you reach this conclusion on behavioural grounds without CU? Should LuxiromChick be added to this case (and perhaps indef-blocked as a sock)?  Also, it sounded like the original reporter was requesting a sleeper check; would this be appropriate?  —  Rich wales (no relation to Jimbo) 06:30, 10 September 2013 (UTC)
 * ТимофейЛееСуда, please be aware that CU's are not allowed per English Wikipedia policy to run checks in response to users' requests to clear their names. —  Rich wales (no relation to Jimbo) 06:30, 10 September 2013 (UTC)
 * Unless they say otherwise, if a CU marks a case as checked, you can assume that their comments are based on CU data. LuxiromChick is the sleeper, and has already been taken care of, so no further action is necessary on this case. ​—DoRD (talk)​ 12:54, 10 September 2013 (UTC)
 * I've blocked the other sockpuppet. Reaper Eternal (talk) 13:19, 10 September 2013 (UTC)

10 August 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Like User talk:LobitaMontoya and User talk:VernitaG, HorrorGeek has been uploading and replacing images from .jpg format to .pgn, as ElPiloto's behaivor. Considering the CamelCase names are also ElPiloto's signature, this gives too many coincidences. <font color="#000000">© <font color="#4B0082">Tb <font color="#6082B6">hotch <font color="#555555"> ™ (en-2.5). 22:15, 10 August 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Although the technical data on the socks is stale, I can still see that this account is editing from the same ISP and range as previous confirmed socks. I also find the behavioural evidence quite convincing and have therefore blocked the account.--<b style="color:Navy;">Jezebel's</b> Ponyo <sup style="color:Navy;">bons mots 22:24, 22 August 2014 (UTC)

14 November 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Continuous uploading of images and changing the existing of images related to Madonna articles, just like its master. At present not requesting WP:CU since it looks like a WP:DUCK —<font size="2" face="Courier New" color="#6F00FF"> Indian: <font color="#FF033E">BIO  [ <font face="Tempus Sans ITC" color="#1C1CF0">ChitChat ] 06:26, 14 November 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
, Wikiusername7795 is a very old account, having first edited in December 2010. The previous CUs are a bit confusing as to who connects to whom, but I believe that a CU done by in December 2011 would have turned this account up, although I am not sure. In any event, regardless of whether I'm going to endorse a CU, I'd appreciate some diffs between Wikiusername and the master that behaviorally connect the two. Assume, as you always should, that the clerk evaluating the report is unfamiliar with the previous history. Thanks.--Bbb23 (talk) 19:20, 28 November 2014 (UTC)
 * , if it's ElPilotoDi, they've moved to another continent.-- Jezebel's Ponyo bons mots 19:44, 28 November 2014 (UTC)
 * Based on 's comment, I'm closing this with no action.--Bbb23 (talk) 19:55, 28 November 2014 (UTC)