George Elokobi case

27 known sockpuppets

Reminder: Compile an entry for WP:LONG as soon as possible. --The Fifth Horseman 14:43, 25 July 2007 (UTC)

Remember to check WP:RFCU#Requests_for_IP_check for further information regarding the last four socks.

Report

First Wave: Throwaway socks

Original George Elokobi vandal

First active 21:06, 23rd July

Began by vandalising George Elokobi [1] with allegations of drug use, which was followed with Attacks on Colchester United F.C. [2][3] and User: Crowstar [4], as an apparent revenge for reverting the vandalism on Colchester page. The vandal then tried reporting Crowstar to WP:AIV [5] and removing reports on himself from the page [6][7].

Repeatedly removed vandal warnings and block notices from his talk page [8][9][10].

Indefblocked on 21:18, same day.

When blocked, abused the {{unblock}} template [11][12] (which he also did with his sockpuppets when they were blocked).

Pages attacked: George Elokobi | Colchester United F.C. | User: Crowstar | WP:AIV

Sock: George Elokobi 2

First active 13:35, 25th July

Apparently the same vandal has returned on 25th July with a transparently named sock. First action was vandalising User:Crowstar with false information about being indefinitely blocked as a sockpuppet of Daniel Brandt [13], followed by another attack on George Elokobi [14] and User talk: Crowstar [15]. The last page attacked was Colchester [16].

Indefblocked on 13:39, same day

After being blocked, the vandal has once again abused {{unblock}} [17].

Pages attacked: George Elokobi | User: Crowstar | User talk: Crowstar | Colchester

NOTE: The same text about supposed drug abuse that has been used by this sock to deface George Elokobi has since been used by all the following ones.

Sock: George Elokobi returns

First active 13:45, 25th July

Another sockpuppet of the vandal appeared quite soon, attacking George Elokobi [18] and User: Corvus cornix [19] (with apparent notion of revenge for either Corvus reverting his vandalism on Colchester United F.C., George Elokobi, WP:AIV or reporting him to [[WP:ANI].

After both attempts being reverted by User:DerHexer, the vandal attacked the pages again [20] [21].

Indefblocked on 13:48, same day

The vandal then proceeded to blank the talk page for this sock [22] and filing another {{unblock}} request, this time under false claim of never having commited any vandalism [23].

Pages attacked: George Elokobi (twice) | User: Corvus cornix (twice)

Sock: George Elokobi returns to wiki

First active 13:50, 25th July

Followed the pattern by striking at George Elokobi [24], another attack on User:Corvus cornix [25] and then on User talk: DerHexer [26], apparently due to DerHexer's involvment in reverting his prior vandalism and issuing a warning to the sock.

Then proceeded to blank the sock's User Talk page in another attempt to conceal evidence of his vandalism [27].

Indefblocked on 13:53, same day

Another {{unblock}} request has been filed, with a personal insult directly targeted at DerHexer [28] (the comment is the same as has been placed on DerHexer's User Talk page).

Pages attacked: George Elokobi | User: Corvus cornix | User talk: DerHexer

Sock: George Elokobi takes drugs

First active 13:55, 25th July

The fifth sock used by the vandal began with another attack on George Elokobi [29] and User: Corvus cornix [30].

This was followed by an attack on User talk: Brian0918 [31]. While the vandal's prior attacks on User and User Talk pages have typically been attempts at taking vengeance for reverting his vandalism or issuing warnings on his talk pages, no such connection can be found here.

Next attack was on User:Oxymoron83 [32], with the same reasons as most of the prior ones (reverted vandalism/issued a warn)

Indefblocked on 13:57, same day

Another {{unblock}} abuse followed [33] with the remark once again targeting DerHexer.

Pages attacked: George Elokobi | User: Corvus cornix | User talk: Brian0918 | User: Oxymoron83

NOTE: The vandal seems to have a grudge towards Brian0918. Ask the attacked user about possible culprits.

Sock: George Elokobi takes LSD

First active 14:00, 25th July

Blocked for violating username policy before could vandalise.

Indefblocked on 14:00, 25th July

Requested {{unblock}} with false claim of innocence, according with the overall pattern [34].

Sock: George Elokobi 4

First active 14:03, 25th July

The last of the first wave of sockpuppets was blocked almost immediately, but still managed to deface George Elokobi [35] by a margin of seconds.

Indefblocked on 14:03, same day

True to form, the vandal once again used {{unblock}} under allegation of never having vandalised. [36]

Pages attacked: George Elokobi

Second wave: Sleeper Socks

After the George Elokobi article has been semi-protected by Wknight94 on 14:03 [37], several priorly created sockpuppets of the vandal have been activated and used to vandalize the page again.

Sock: Ungodly sinner

First active 14:06, 25th July
Created: 15:09, 20th July

First of the second wave of attack, this sock has attacked George Elokobi [38] and User: Corvus cornix [39]

Indefblocked on 14:07, same day

Pages attacked: George Elokobi | User: Corvus cornix

Sock: Big bad wolf of the wiki

First active 14:10, 25th July
Created: 15:12, 20th July

Attacked George Elokobi [40]

Indefblocked on 14:10, same day

Pages attacked: George Elokobi

Sock: The critic of glory

First active 14:14, 25th July
Created: 15:13, 20th July

Attacked George Elokobi [41]

Indefblocked on 14:15, same day

Pages attacked: George Elokobi

Sock: Lacking glory

First active 14:17, 25th July'
Created: 15:12, 20th July'

Attacked George Elokobi [42]

Indefblocked on 14:18, same day

This is the only of the second wave of socks the vandal has requested {{unblock}} with, claiming to be unaware of how its' actions could be vandalism [43].

Pages attacked: George Elokobi

NOTE:The {{unblock}} request may indicate the vandal has ran out of pre-made socks at this point or wanted to preserve at least one of them for further use.

Third wave: Back to throwaway socks

Wknight94 changed the protection status on George Elokobi to full protection on 14:18 [44]. The vandal has backed out for a short time, only to resume vandalism on other pages (usually ones related to the incident) on 14:39.

NOTE: On 14:28, User:The Fifth Horseman filled a request for protecting the Talk pages for existing socks of the vandal [45] to prevent further abuse of {{unblock}} by their owner. Before its rejection, the vandal attempted to remove the request

Sock: George Elokobi 5

First active 14:39, 25th July

The first of the third attack wave began with removing WP:RFP entry on his sockpuppets [46], followed by attacking User talk: The Fifth Horseman [47] WP:RFP again [48] and finally replacing WP:ANI with a copy of the George Elokobi article in its vandalised form [49], remarking in his edit summary "we only care about this".

Indefblocked on 14:43, same day

The sock has again requested {{unblock}} [50], in the process admitting to being a sock ("Why do I keep being blocked?")

Pages attacked: WP:RFP (twice) | User talk: The Fifth Horseman | WP:ANI

NOTE: At that point, User: The Fifth Horseman began compiling evidence against the vandal on this page.

Sock: George Elokobi 6

First active 14:47, 25th July

Removed the same WP:RFP entry as before [51], followed by another go at User talk: The Fifth Horseman [52]

Indefblocked on 14:48, same day

Requested {{unblock}} [53], same as the one before it.

Pages attacked: WP:RFP | User talk: The Fifth Horseman

Sock: George Elokobi 7

First active 14:50, 25th July

WP:RFP again [54],m then User talk: The Fifth Horseman [55], followed by an attempt to conceal the evidence present on User: The Fifth Horseman/Notes [56]

Indefblocked on 14:52, same day

Yet again, the vandal requested {{unblock}} under false allegations of innocence [57].

Pages attacked: WP:RFP | User talk: The Fifth Horseman | User: The Fifth Horseman/Notes

Sock: George Elokobi 8

First active 14:55, 25th July

Replaced WP:AIV with the vandalised version of George Elokobi article [58]

Indefblocked on 14:55, same day

The vandal then user the {{unblock}} template, inserting a personal attack towards DerHexer and Wizardman into it. [59]

Pages attacked: WP:AIV

Sock: George Elokobi 9

First active 15:01, 25th July

Replaced Third Servile War with the copy of George Elokobi article [60].

Indefblocked on 15:01, same day

True to form, requested {{unblock}}, "justifying" it with a general insult towards admins [61].

Pages attacked: Third Servile War

NOTE: Motives for attacking this specific page are unknown. It is possible the vandal has attacked it in the past under a different username or as anonymous IP.

Temporary break

After losing George Elokobi 9, the vandal has backed out for next 18 hours, only to return the next morning with another sockpuppet.

NOTE: This break may indicate the vandal used a public computer (eg in a school library or an internet cafe) to access Wikipedia. It is likely the IP used by the first and last accounts will turn out different from the one used by the others.

Sock: George Elokobi 10

First active 07:59, 26th July

The only sock to appear on 26th July, George Elokobi 10 began by vandalizing User:The Fifth Horseman/Notes [62]. After receiving a vandal warning from User: Clpo13, the vandal attacked his page [63] and blanked his own User Talk page in attempt to conceal evidence [64]. After his vandalism was reverted, the vandal struck both pages again [65][66].

At this time, User: The Fifth Horseman has filed a report on WP:AIV on the subject of this newly discovered sock [67].

Meanwhile, the vandal continued to blank his User Talk page [68][69] and attempted removing the WP:AIV report about himself [70].

Indefblocked 08:08, same day

True to form, the vandal first blanked his User Talk page [71] and then demanded unblock [72], this time under the shortly disproven allegation of not being a sock.

Pages attacked: User:The Fifth Horseman/Notes (twice) | User: Clpo13 (twice) | WP:AIV

Fourth Wave

Sock: George Elokobi 11

Sock: George Elokobi 12

Sock: George Elokobi 13

Sock: Whitewater 00989

Sock: George Elokobi A

Sock: George Elokobi AA

===Sock: George Elokobi AAA===

Sock: George Elokobi AAAA

Case Summary

Repeatedly attacked George Elokobi and on User/User Talk pages of any users who either warned him or had reverted his vandalism. Attempted to conceal evidence by blanking the User Talk pages for his sockpuppets, and any pages which contained evidence of his vandalism. Nearly every one of his socks has requested {{unblock}}, often inserting personal attacks towards Wikipedia admins as the reason for unblock.

After his original account has been blocked, the vandal has made heavy use of sockpuppets (over 20) to continue attacks, including four created several days prior to the incident.

Conclusions

The vandal displays clear knowledge of Wikipedia procedures. Most likely it is not his first attack run and he posessed (or still does) one or more as of yet unidentified Wikipedia accounts for at least several months prior.
The vandal may have committed similar vandalism with use of throwaway sockpuppets before
The highly immature and agressive nature of his behavior suggest young age of the perpetrator