Wikipedia:Sockpuppet investigations/Foxy Spanks/Archive

Suspected sockpuppets
Spamming of Bitcasino locally and cross-wiki (see Q109594823) and



Of Ukranian origin (not disclosing how I know this). See also m:Talk:Wikiproject:Antispam. Chances are we know who this spammer is. MER-C 12:56, 3 June 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * -  Girth Summit  (blether)  13:39, 3 June 2023 (UTC)
 * , there is proxy use here. Each account uses IPs associated with a separate country, they jump around within the country, and never use the same IP twice. Details:
 * is stale, nothing to go on.
 * is using proxies from Country A. They have overlapped on an IP with, but the edits were about a week apart so some behavioural analysis would be needed to make a connection.
 * is editing out of a proxy in Country B.
 * is editing out of IPs that are not flagged as proxies, in Country C.
 * is editing out of proxies in Country D.
 * has edited from two IPs, both of them in Country E, one of which is flagged as a proxy.
 * None of the countries above are Ukraine; they span three continents. Any connection between these accounts will need to be made based on behaviour. Best Girth Summit  (blether)  13:51, 3 June 2023 (UTC)


 * Blocked HQprovo because they were also casino spamming, alongside.
 * Blocked all as spammers. Closing. MER-C 15:58, 3 June 2023 (UTC)
 * - reopening while I look at Gerry Lynnt.  Girth Summit  (blether)  16:59, 3 June 2023 (UTC)
 * OK - is geolocates to Country (where am I up to...) F. It has edited from two IPs, one of which is flagged as a proxy, and one of which isn't. There are no other accounts on the proxy, but the other one is an IPv6 and on the /64 I see  and the autopatrolled account  - why they're autopatrolled with just 300-odd edits escapes me, but something doesn't feel right here. The edits from Hatelove111 came within five days of those from Gerry Lynnt. Thought?  Girth Summit  (blether)  17:06, 3 June 2023 (UTC)
 * I'm digging deeper, and going down into a bit of a rabbit hole here. Hatelove111 has shared IPs with a host of blocked/globally locked accounts, including the likes of, , , and more. I'm pretty much out of time to do any more digging this evening, but pinging some of the folks who have dealt with other socks on the IPs they're editing out of: , , . There are a bunch of other accounts on those IPs that should probably get a bit of scrutiny as well - one of the IPs in question has been blocked recently for some graphically violent abuse at 's talk.  Girth Summit  (blether)  17:20, 3 June 2023 (UTC)
 * Kristina Kleppt is probably a Bodiadub sock, judging by ar:إيلا_أيفانوفا, fr:Ella Ivanova, and File:Ms Ella Ivanova.jpg. There's quite a few Bodiadub-style usernames amongst this lot. MER-C 10:46, 4 June 2023 (UTC)
 * Some cross-wiki spammers, all of idealecasinos.nl:
 * MER-C 11:07, 4 June 2023 (UTC)
 * Closing. defering to you on if you want to block the above. TonyBallioni (talk) 22:54, 29 July 2023 (UTC)
 * All accounts have been either blocked and/or locked. MER-C 10:18, 30 July 2023 (UTC)
 * MER-C 11:07, 4 June 2023 (UTC)
 * Closing. defering to you on if you want to block the above. TonyBallioni (talk) 22:54, 29 July 2023 (UTC)
 * All accounts have been either blocked and/or locked. MER-C 10:18, 30 July 2023 (UTC)
 * MER-C 11:07, 4 June 2023 (UTC)
 * Closing. defering to you on if you want to block the above. TonyBallioni (talk) 22:54, 29 July 2023 (UTC)
 * All accounts have been either blocked and/or locked. MER-C 10:18, 30 July 2023 (UTC)
 * All accounts have been either blocked and/or locked. MER-C 10:18, 30 July 2023 (UTC)