Wikipedia:Sockpuppet investigations/Pilot375/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

See Ukpong1 COIN case (initiated by SmartSE / ) for background. We are discussing many suspicious UPE-type articles including Draft:Heather Wilde (Speaker) created by the master and Heather Wilde (author) created by the sock. Bottom line up front, It's clear Ukpong1 just cleaned up the draft and reposted it, and was either meating or socking with Pilot375.

Details substantiating the claim above. I pasted the initial revision of the article into the draft to generate this diff this diff after the histmerge. They don't quite match up. Most noticeably, there's the same sources but different reference formatting. Mostly-to-always the earlier uses inline ELs and the later uses a citation template. And this telling detail: the new article retains a near-identical version of the draft's infobox including the caption of a deleted image. Then about 5 hours after Ukpong1 had created the article, Pilot375  a newly uploaded image (which might be the same as the deleted one, I can't tell).

We've got about a dozen other accounts and IPs listed at the COIN case but I'm not detailing their involvement at this time. However it wouldn't be surprising if any or all were connected. ☆ Bri (talk) 17:22, 28 January 2018 (UTC)

Added Lakoenig, clearly aware of the not four-hour-old article here. Note that the account was created in roughly the same timeframe as Ukpong1, February–March 2017.

Note to reviewers -- the draft and article were histmerged since I opened the case. This is the creation of one. This is the creation of the other.

Some evidence that another sockfarm is involved, at least they have edited the following articles created by Ukpong1:
 * Possible involvement of other sockfarms
 * Gigi Cesarè - created by Ukpong1; edited by  (Commanderofthescript sockfarm) and edited by  (Richzog Tri sockfarm)

New evidence added ☆ Bri (talk) 21:16, 28 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

The March activity on AfD was related to https://www.inc.com/heather-wilde/garfields-wikipedia-page-just-got-vandalized-and-why-this-matters-for-your-bran.html - Lakoenig and I do have a WP:EXTERNALREL to Wilde, but are neither paid nor connected to each other. I have no knowledge of Ukpong1. ☆ Pilot375 (talk) 00:32, 29 January 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Ukpong1 is an unusual account for sure, but whether or not this account is being used for undisclosed paid editing isn't really a matter for this investigation. The bottom line is that, the combined interest in Heather Wilde notwithstanding, there is no serious behavioural evidece that Pilot375 and Ukpong1 are the same person, or, except in this instance, (which forms a very small fraction of the latter's edits) that they are colluding.
 * The relationship of Ukpong1 with the other sock farms is worth further investigation. I note that the ANI follow-on from the above COIN investigation (Administrators' noticeboard/IncidentArchive974) concluded that no further action was needed until COIN concluded and that the latter is ongoing. I am not suggesting the same conclusion here but I will not have time to look into this issue any further today. No objections from me if someone else wants to have a go.
 * Lakoenig has so few edits that it difficult to draw any firm conclusions. I note Pilot375's comments about this, which I find unconvincing. Lakoenig has only edited once since March 2017 and I can see no real purpose in a block at this point. I hope Pilot375 will take this as a gentle warning.  Ben   Mac  Dui  19:17, 18 February 2018 (UTC)


 * The edits to Gigi Cesarè are intriguing but having looked at any overlap with all of the other Commanderofthescript and Richzog Tri socks via the Editor Interaction Analyser I could find no more other than Lyle Howry as mentioned a COIN. It is a deficiency of this tool that it does not count deleted edits, of which Ukpong1 has many. However, on a manual check there no matches of deleted edits with any Richzog Tri socks or Commanderofthescript (I didn't go through all the latter's socks). If there were socking going on CU would have identified Ukpong1 already when looking into these farms. There is probably some other kind of collusion going on but I can see scant hard evidence of this beyond the Gigi Cesarè, Lyle Howry and Heather Wilde connections, which are odd, but limited to 1, 3 and 3 edits respectively out of Ukpong1's 3000 or so. Ben   Mac  Dui


 * I hadn't looked at it before, but the Richzog Tri case strongly reminds me of PlikoraT, as does this report. for all 3 accounts. Ivanvector (Talk/Edits) 10:24, 24 February 2018 (UTC)
 * The three accounts are ❌ to each other and to the other two cases mentioned. Ukpong1 is to  but . See Sockpuppet investigations/Mahveotm and the master’s blocking history.--Bbb23 (talk) 18:08, 24 February 2018 (UTC)
 * How very interesting - but after a quick look this is not likely to be the most straightforward of analyses. I am not familiar with Mahveotm but the two certainly share interests in common. I doubt I will get the chance to look at this before the weekend unless the weather confines me to barracks - in the meantime I don't want to put anyone else off if they are keen to take a peek. Ben   Mac  Dui

Both editors have an interest in Nigeria and looking at their edits in February 18 it is interesting that although they both edit at many different times of the day there is very little crossover beteen them (i.e. few times when they both seem to be editing). They also agree with one another e.g. Articles for deletion/Adewale Adeleke, Articles for deletion/Samuel Robinson (actor). On 2.9.17 Mahveotm edits from 20:12 to 21:30. Then Ukpong1 politely reverts an edit undertaken by Mahveotm at 21:11 also at 21:30, then does a few more edits until 21:37. Mahveotm then restarts again at 21:44. If this is socking it is quite nifty and having checked another month or two there is a bit more edit time overlap.

Furthermore, if they are one individual then they have apparently different styles. Mahveotm is silly enough to create two socks early on, is something of a wikignome with a lot of automated edits and a higher percentage of minor edits. His English is weak and his work is littered with minor typos. As we know, Ukpong1 has a much more diverse set of interests; also a higher percentage of larger edits, and although makes a few mistakes with his/her English, has far fewer typos etc. If they live or work close to one another perhaps they occassionally collude off-wiki, but the bottom line is that if I were a wannabe wanting someone to give me a bio on this organ I might offer an inducement to Ukpong but I doubt I would ask Mahveotm. In short I'd say that as socks its possible, but not likely. Ben  Mac  Dui  19:00, 1 March 2018 (UTC)
 * I remain uneasy about Ukpong1 but I have to concur with this analysis: the evidence is not conclusive enough to establish a connection. Closing. Ivanvector (Talk/Edits) 19:07, 1 March 2018 (UTC)
 * Independently of this, I have blocked Ukpong1 as there were to many redflags indicative of UPE and their explanations were less than convincing. I've had a look through Mahveotm's creations and I don't see anything as obvious indicating they are a UPE, so I agree with User:Ben MacDui that it is unlikely they are socks. SmartSE (talk) 17:42, 7 March 2018 (UTC)