Bianbum
- Bianbum ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
11 December 2015
- Suspected sockpuppets
- Desforr ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Two accounts complementing each other's edits; one created very recently. Bianbum creates Free Flights to Italy, article promoting an NGO linked to freefloightstoitaly.ngo, which in all probability is a scam. At the same time, he engages in an edit war on Turnitin (bringing about full protection of the article) where he repeatedly inserts links to a LinkedIn article on how the Turnitin system can be cheated [1]. On Talk:Turnitin, these claims are then supported from Desforr [2], and the URL of a website cheatturnitin.xyz is added from IP [3].
Now, the three editors share common style, including capitalisation and use of elipsis (...). However, the burning gun linking the two accounts most is WHOIS, as both freeflightstoitaly.ngo and cheatturnitin.xyz have the same owner [4] [5].
All in all, this is far beyond coincidence. The person being promoted in refspam by both accounts is also listed in WHOIS as owner of both websites; whilst Biancan's contribution history is unusually reflective of this profile, which also suggests COI.
This is somewhat a tricky case but I have been around WP for long enough to be fairly confident in this SPI case. kashmiri TALK 00:12, 18 December 2015 (UTC)
- All three IP addresses have been used exclusively to edit the same article that Bianbum has recently been editing. All three IP addresses geolocate to Italy and the same ISP. They have made the same edits and arguments as Bianbum with the 79.x IP address used after Bianbum was blocked for edit warring. Desforr has very few edits with some of them focusing on Italian topics (e.g., this and this) and, most importantly, had not edited at all in the last month until popping into the Talk page to support Bianbum after he or she had been blocked. I'm confident that we can label the IP addresses sockpuppets based solely on this evidence but I'm concerned about the registered account and wondering if any others are out there, too. ElKevbo ( talk) 16:10, 11 December 2015 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Another point tying these accounts together is the frequent adding of articles by Giuseppe Macario on linked in. For example:
[6] [7]. I also think Desforr popped up when the Turnitin page was semiprotected. - Dan Eisenberg ( talk) 22:47, 11 December 2015 (UTC)
- I just added 82.49.49.45 which just appear in the talk page and seems like the same person [8] and is also from Rome area. - Dan Eisenberg ( talk) 16:48, 12 December 2015 (UTC)
- I did a bit more poking around and noticed that there have been sockpuppets supporting keeping a wikipediage page on Giuseppe Macario [9]. I suspect these are related to the same person. Dan Eisenberg ( talk) 05:40, 20 December 2015 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
-
Clerk endorsed for a check of the named accounts. —
DoRD (
talk) 16:08, 19 December 2015 (UTC) - The two accounts are
Confirmed, blocked, and tagged. I'm not closing the case in someone wants to take action against any of the IPs.--
Bbb23 (
talk) 05:55, 20 December 2015 (UTC)
- IPs not active any more. Closing. Vanjagenije (talk) 09:58, 22 December 2015 (UTC)
06 September 2022
Suspected sockpuppets
- Tadde0 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Adrin10 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Dom21a ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Gmacar ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Oscar1954 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Romeo712 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Dom21a is a new sock of Bianbum.
Bianbum created the ISSEA article in 2014. The account was blocked for sockpuppetry in 2015. Tadde0 is blocked on itwiki as a sock of Bianbum. That account edited the article in 2016. Modulato was blocked in 2021 as a sock of Bianbum. That account heavily edited and moved the article in Dec 2020. It also attempted to recreate it in Feb 2021.
Adrin10 is an inactive account. It created an article for a person named in the original SPI case for Bianbum. It also created an article for Yorker International University which was heavily edited by Modulato. Adrin10 heavily edited the ISSEA article as well.
XTools shows that the top 5 of 6 contributors for the ISSEA article are Adrin10, Bianbum, Modulato, Dom21a, and Tadde0. The edit descriptions follow a similar pattern of being all lowercase. Dom21a comments about the many names of ISSEA. This is something Modulato did as well and Adrin10 too.
When we compare all of these accounts, we find that Dom21a shares other article interests with Bianbum, Modulato, and Adrin10. SimoneBilesStan ( talk) 04:31, 6 September 2022 (UTC)
- I added an IP editor and two more inactive accounts to the list of socks. The IP editor is using a unreliable source which was previously used by the Modulato account. While the URL has changed slightly, the content remains the same. Compare the "review" version with the "reviews" version. It's helpful to note that the 151.0.0.0/16 IP range appears heavily in many articles edited by these accounts.
- The "review" domain is currently monitored by COIBot. It had two previous versions which are also monitored and redirect to the "review" domain. These are Presto News and Evidence Based Review. Both of these websites were used in the past by the Adrin10 account. Tadde0 included the Presto website at one point. Another inactive account, Gmacar, used both websites as well. That account has editing overlap with Bianbum, Modulato, and Adrin10. It's likely the master sock.
- I also included two additional inactive accounts, Oscar1954 and Romeo712. They appear to have included the Presto link in attempts to create articles about Free Flights to Italy which comes up in the itwiki block discussion for Tadde0. SimoneBilesStan ( talk) 01:15, 19 September 2022 (UTC)
- I have come across further evidence.
- The Dom21a account is attempting to PROD the Norman Academy article which was edited several times by Gmacar. The Gmacar account also added to a list of unaccredited institutions. The same article was edited by Adrin10 several times which included content on the ISSEA, Supdi, or Politecnico di Studi Aziendali institution.
- I further discovered that Tadde0 nominated an article Amanda Bradford for deletion which Gmacar supported. Adrin10 nominated the article a second time.
- The Ripoff Report article shares an editing history by Tadde0, Adrin10, and Modulato. There have been two recent WindTre IPs editing that article as well. Diff, Diff. There is an additional one in the same time period on the talk page. Diff. It seems pretty reasonable to conclude that the editor is changing their IP address. SimoneBilesStan ( talk) 15:57, 21 September 2022 (UTC)
- 151.35.7.250, another WindTre IP, edited an article which Modulato has previously edited. SimoneBilesStan ( talk) 16:14, 21 September 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
-
In progress - --
RoySmith
(talk) 17:46, 22 September 2022 (UTC) - I don't fully understand what's going on here, but I've blocked the account who filed this as a confirmed sock, so I'm just going to close this. If a legitimate user has concerns about the accounts mentioned here, please file a new report. -- RoySmith (talk) 18:08, 22 September 2022 (UTC)
10 October 2022
Suspected sockpuppets
- Ivcona ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Very new user too familiar with how to use SPI and seemed to do so in retaliation for a MfD. Also the socks in this case and the case this account filed a report for have previously warred. Dreamy Jazz talk to me | my contributions 11:24, 10 October 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Confirmed to
Dom21a (
talk
+ ·
tag ·
contribs ·
deleted contribs ·
logs ·
filter log ·
block user ·
spi block ·
block log ·
CA ·
CheckUser(
log) ·
investigate ·
cuwiki).
Dreamy Jazz
talk to me |
my contributions 11:27, 10 October 2022 (UTC)
- CU blocked Ivcona. Dreamy Jazz talk to me | my contributions 11:29, 10 October 2022 (UTC)
- Closing. GAB gab 01:56, 13 October 2022 (UTC)
03 March 2023
Suspected sockpuppets
- IJustNeedToMessageYou ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Similar behavior to Modulato and Dom21a:
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=992251653
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1106784423
- https://en.wikipedia.org/?title=ISSEA&diff=prev&oldid=1106786078
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1108436461
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1116704763
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1139666039 MoodyTourist ( talk) 19:50, 3 March 2023 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Blocked, tagged, global lock requested (to match the other socks). I can't help saying that the filer has not made any other edits here except filing this report. Closing. Bbb23 ( talk) 23:45, 3 March 2023 (UTC)
Bianbum
- Bianbum ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
11 December 2015
- Suspected sockpuppets
- Desforr ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Two accounts complementing each other's edits; one created very recently. Bianbum creates Free Flights to Italy, article promoting an NGO linked to freefloightstoitaly.ngo, which in all probability is a scam. At the same time, he engages in an edit war on Turnitin (bringing about full protection of the article) where he repeatedly inserts links to a LinkedIn article on how the Turnitin system can be cheated [1]. On Talk:Turnitin, these claims are then supported from Desforr [2], and the URL of a website cheatturnitin.xyz is added from IP [3].
Now, the three editors share common style, including capitalisation and use of elipsis (...). However, the burning gun linking the two accounts most is WHOIS, as both freeflightstoitaly.ngo and cheatturnitin.xyz have the same owner [4] [5].
All in all, this is far beyond coincidence. The person being promoted in refspam by both accounts is also listed in WHOIS as owner of both websites; whilst Biancan's contribution history is unusually reflective of this profile, which also suggests COI.
This is somewhat a tricky case but I have been around WP for long enough to be fairly confident in this SPI case. kashmiri TALK 00:12, 18 December 2015 (UTC)
- All three IP addresses have been used exclusively to edit the same article that Bianbum has recently been editing. All three IP addresses geolocate to Italy and the same ISP. They have made the same edits and arguments as Bianbum with the 79.x IP address used after Bianbum was blocked for edit warring. Desforr has very few edits with some of them focusing on Italian topics (e.g., this and this) and, most importantly, had not edited at all in the last month until popping into the Talk page to support Bianbum after he or she had been blocked. I'm confident that we can label the IP addresses sockpuppets based solely on this evidence but I'm concerned about the registered account and wondering if any others are out there, too. ElKevbo ( talk) 16:10, 11 December 2015 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Another point tying these accounts together is the frequent adding of articles by Giuseppe Macario on linked in. For example:
[6] [7]. I also think Desforr popped up when the Turnitin page was semiprotected. - Dan Eisenberg ( talk) 22:47, 11 December 2015 (UTC)
- I just added 82.49.49.45 which just appear in the talk page and seems like the same person [8] and is also from Rome area. - Dan Eisenberg ( talk) 16:48, 12 December 2015 (UTC)
- I did a bit more poking around and noticed that there have been sockpuppets supporting keeping a wikipediage page on Giuseppe Macario [9]. I suspect these are related to the same person. Dan Eisenberg ( talk) 05:40, 20 December 2015 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
-
Clerk endorsed for a check of the named accounts. —
DoRD (
talk) 16:08, 19 December 2015 (UTC)
- The two accounts are Confirmed, blocked, and tagged. I'm not closing the case in someone wants to take action against any of the IPs.--
Bbb23 (
talk) 05:55, 20 December 2015 (UTC)
- IPs not active any more. Closing. Vanjagenije (talk) 09:58, 22 December 2015 (UTC)
06 September 2022
Suspected sockpuppets
- Tadde0 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Adrin10 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Dom21a ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Gmacar ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Oscar1954 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Romeo712 ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Dom21a is a new sock of Bianbum.
Bianbum created the ISSEA article in 2014. The account was blocked for sockpuppetry in 2015. Tadde0 is blocked on itwiki as a sock of Bianbum. That account edited the article in 2016. Modulato was blocked in 2021 as a sock of Bianbum. That account heavily edited and moved the article in Dec 2020. It also attempted to recreate it in Feb 2021.
Adrin10 is an inactive account. It created an article for a person named in the original SPI case for Bianbum. It also created an article for Yorker International University which was heavily edited by Modulato. Adrin10 heavily edited the ISSEA article as well.
XTools shows that the top 5 of 6 contributors for the ISSEA article are Adrin10, Bianbum, Modulato, Dom21a, and Tadde0. The edit descriptions follow a similar pattern of being all lowercase. Dom21a comments about the many names of ISSEA. This is something Modulato did as well and Adrin10 too.
When we compare all of these accounts, we find that Dom21a shares other article interests with Bianbum, Modulato, and Adrin10. SimoneBilesStan ( talk) 04:31, 6 September 2022 (UTC)
- I added an IP editor and two more inactive accounts to the list of socks. The IP editor is using a unreliable source which was previously used by the Modulato account. While the URL has changed slightly, the content remains the same. Compare the "review" version with the "reviews" version. It's helpful to note that the 151.0.0.0/16 IP range appears heavily in many articles edited by these accounts.
- The "review" domain is currently monitored by COIBot. It had two previous versions which are also monitored and redirect to the "review" domain. These are Presto News and Evidence Based Review. Both of these websites were used in the past by the Adrin10 account. Tadde0 included the Presto website at one point. Another inactive account, Gmacar, used both websites as well. That account has editing overlap with Bianbum, Modulato, and Adrin10. It's likely the master sock.
- I also included two additional inactive accounts, Oscar1954 and Romeo712. They appear to have included the Presto link in attempts to create articles about Free Flights to Italy which comes up in the itwiki block discussion for Tadde0. SimoneBilesStan ( talk) 01:15, 19 September 2022 (UTC)
- I have come across further evidence.
- The Dom21a account is attempting to PROD the Norman Academy article which was edited several times by Gmacar. The Gmacar account also added to a list of unaccredited institutions. The same article was edited by Adrin10 several times which included content on the ISSEA, Supdi, or Politecnico di Studi Aziendali institution.
- I further discovered that Tadde0 nominated an article Amanda Bradford for deletion which Gmacar supported. Adrin10 nominated the article a second time.
- The Ripoff Report article shares an editing history by Tadde0, Adrin10, and Modulato. There have been two recent WindTre IPs editing that article as well. Diff, Diff. There is an additional one in the same time period on the talk page. Diff. It seems pretty reasonable to conclude that the editor is changing their IP address. SimoneBilesStan ( talk) 15:57, 21 September 2022 (UTC)
- 151.35.7.250, another WindTre IP, edited an article which Modulato has previously edited. SimoneBilesStan ( talk) 16:14, 21 September 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
-
In progress - --
RoySmith
(talk) 17:46, 22 September 2022 (UTC)
- I don't fully understand what's going on here, but I've blocked the account who filed this as a confirmed sock, so I'm just going to close this. If a legitimate user has concerns about the accounts mentioned here, please file a new report. -- RoySmith (talk) 18:08, 22 September 2022 (UTC)
10 October 2022
Suspected sockpuppets
- Ivcona ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Very new user too familiar with how to use SPI and seemed to do so in retaliation for a MfD. Also the socks in this case and the case this account filed a report for have previously warred. Dreamy Jazz talk to me | my contributions 11:24, 10 October 2022 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Confirmed to
Dom21a (
talk
+ ·
tag ·
contribs ·
deleted contribs ·
logs ·
filter log ·
block user ·
spi block ·
block log ·
CA ·
CheckUser(
log) ·
investigate ·
cuwiki).
Dreamy Jazz
talk to me |
my contributions 11:27, 10 October 2022 (UTC)
- CU blocked Ivcona. Dreamy Jazz talk to me | my contributions 11:29, 10 October 2022 (UTC)
- Closing. GAB gab 01:56, 13 October 2022 (UTC)
03 March 2023
Suspected sockpuppets
- IJustNeedToMessageYou ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • SPI Tools
Similar behavior to Modulato and Dom21a:
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=992251653
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1106784423
- https://en.wikipedia.org/?title=ISSEA&diff=prev&oldid=1106786078
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1108436461
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1116704763
- https://en.wikipedia.org/?title=ISSEA&diff=next&oldid=1139666039 MoodyTourist ( talk) 19:50, 3 March 2023 (UTC)
Comments by other users
- Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Blocked, tagged, global lock requested (to match the other socks). I can't help saying that the filer has not made any other edits here except filing this report. Closing. Bbb23 ( talk) 23:45, 3 March 2023 (UTC)