Steward requests/Global/2012-07

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search
Warning! Please do not post any new comments on this page. This is a discussion archive first created in July 2012, although the comments contained were likely posted before and after this date. See current discussion.

Contents

Requests for global (un)block

Global block for 217.23.140.26

Status:    Done

This IP seems to have been a nuisance in a number of places and for some time now - cross wiki spambot - worth considering blocking I think - see contribs - thanks. --Herby talk thyme 11:14, 2 July 2012 (UTC)

Yes check.svg Done, anon-only for 3 months. Trijnsteltalk 13:56, 2 July 2012 (UTC)

Global blocks for many IPv6 proxies

Status:    Done

The following are blocked on zhwiki. The last two are confirmed to be working proxies.

The following are all blocked on enwiki as open proxies:

The following ranges are blocked on enwiki as open proxies:

This one is blocked on frwiki as an open proxy:

There's literally a gold mine of more proxies via stalktoy.--Jasper Deng (talk) 19:44, 2 July 2012 (UTC)

Yes check.svg Done--Vituzzu (talk) 20:05, 2 July 2012 (UTC)

Global block for an IPv6 webhost range

Status:    Done

Per WHOIS.--Jasper Deng (talk) 20:12, 2 July 2012 (UTC)

Yes check.svg Done--Vituzzu (talk) 20:22, 2 July 2012 (UTC)

Global block for User:206.165.131.68

Status:    Done

The range is a frequent guest on User:MF-Warburg/Unexisting image spam. From what I see there, this IP has at least spammed tswiki and gotwiki for quite a long time. A local block on gotwiki has only expired yesterday, and again the unexisting image spam came up from the IP. Probably a long gblock could be useful. --MF-W 13:45, 3 July 2012 (UTC)

Yes check.svg Done, three months globally blocked by Billinghurst. Trijnsteltalk 14:36, 3 July 2012 (UTC)
To add to this, I looked at the similar pages and wikis that have been added, and looked at the other IP addresses, and we have been identifying these slabs of IP ranges and putting in place increasingly longer range blocks. Thanks for these and your patience. — billinghurst sDrewth 14:59, 3 July 2012 (UTC)

Global block for 216.213.45.184

Status:    Done

Please block this cross-wiki spambot (see User:MF-Warburg/Unexisting image spam) for a while. Mathonius (talk) 03:22, 4 July 2012 (UTC)

Yes check.svg Done, anon-only block for 3 months as he was also active in the end of May. Trijnsteltalk 09:58, 4 July 2012 (UTC)

Global block for 2001:41D0::/40

Status:    Done

This is a webhost range.--Jasper Deng (talk) 18:59, 5 July 2012 (UTC)

One was already done actually. --Vituzzu (talk) 22:35, 5 July 2012 (UTC)

Global block for 93.182.134.19

Status:    Not done

Please block this cross-wiki spam/vandalbot. Mathonius (talk) 14:20, 6 July 2012 (UTC)

I see one edit on one wiki... --Daniel Mayer (mav) (talk) 23:50, 7 July 2012 (UTC)
I guess there are some deleted edits somewhere. Is that correct, Mathonius? Trijnsteltalk 16:03, 8 July 2012 (UTC)
Ah, yep, see the deleted contribs on the English Wikiversity and the deleted contribs on Wikimedia Commons. But as this IP address was globally blocked for 1 hour on 6 July, I don't think a longer global block is necessary anymore for now. X mark.svg Not done. If it continues later, please report it here again and I'll block it. Trijnsteltalk 16:10, 8 July 2012 (UTC)

Global block for 184.82.203.15

Status:    Done

For consideration - Commons and Meta have solely spam/pattern accounts on this IP. Thanks. --Herby talk thyme 10:09, 7 July 2012 (UTC)

Done. — T. 10:28, 7 July 2012 (UTC)

Global block 178.148.245.30

Status:    Not done

Entered inaccurate information in addition to several warning, from that IP creates accounts with identical names. Blocked at the Wikipedia: 1. Croatia 2. Serbia 3. Serbo-Croatian Greeting! --Kolega2357 (talk) 16:16, 3 July 2012 (UTC)

Err seems to be stale, so marked as not done. Do correct me if I'm wrong... --Bencmq (talk) 15:59, 11 July 2012 (UTC)

Global blocks for SIXXS gateway IPs

Status:    Done

Open proxies.Jasper Deng (talk) 20:37, 9 July 2012 (UTC)

Done, Sir. — MA (audiencia) 20:58, 9 July 2012 (UTC)

Global block for 38.69.197.224

Status:    Done

The "unexisting image" spammer. He started to use this IP (which whatismyipaddress.com identifies as a static one) at least on 3 July (see above tswiki). --MF-W 19:12, 12 July 2012 (UTC)

Comment Comment The link to ukwiki doesn't point me to any deleted contributions of this IP. Could you please fix it? Trijnsteltalk 20:34, 12 July 2012 (UTC)
Sorry, it wasn't ukwiki, but uk.wikmedia. Fixed now. --MF-W 20:38, 12 July 2012 (UTC)
Yes check.svg Done. I blocked the IP address globally for 1 month - if he continues after that, please report again and I'll block it longer. Trijnsteltalk 20:47, 12 July 2012 (UTC)

Global block for 173.212.192.229

Status:    Done

Given I've now blocked this IP on two project after CU evidence due to spambot account creation I think consideration could be given to a global block. See stopspam/projecthoneypot & proxybase too - thanks. --Herby talk thyme 07:46, 13 July 2012 (UTC)

Done by Matanya. Thanks. — MA (audiencia) 10:41, 13 July 2012 (UTC)

Global block for 178.92.99.141

Status:    Done

This is a spambot, probably xrumer based posting multilanguage questions about pets. Posting on de it fr id and en wikipedias see [1] [2] [3]. I have blocked this on en.wikipedia based on edit filter 271 eg see [4] -- Graeme Bartlett (talk) 02:17, 15 July 2012 (UTC)

Now the pet spammer is using 178.92.95.209 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker on fr.wikipedia and stopped by edit filter on en.wiki. Graeme Bartlett (talk) 10:31, 15 July 2012 (UTC)
Yes check.svg Done -- Tegel (Talk) 10:35, 15 July 2012 (UTC)

Global block for 151.0.15.210

Status:    Done

Please consider blocking this cross-wiki spambot (hit meta and en.q so far). Thanks, Mathonius (talk) 00:17, 20 July 2012 (UTC)

Yes check.svg Done Snowolf How can I help? 03:20, 21 July 2012 (UTC)

Global block for 178.95.41.228

Status:    Done

Please block this cross-wiki spambot. Mathonius (talk) 14:03, 20 July 2012 (UTC)

Black check.svg Already done by Luckas Blade. Snowolf How can I help? 03:21, 21 July 2012 (UTC)

Global block for 198.143.184.78

Status:    Done

Please block this cross-wiki comment spammer. Mathonius (talk) 01:08, 21 July 2012 (UTC)

Yes check.svg Done by Jyothis. Thanks, Mathonius (talk) 01:59, 21 July 2012 (UTC)

Global block for 46.33.240.230

Status:    Done

Please block this cross-wiki comment spammer. Mathonius (talk) 01:59, 21 July 2012 (UTC)

Yes check.svg Done Snowolf How can I help? 03:28, 21 July 2012 (UTC)

Global block for 67.198.74.219

Status:    Done

Xwiki abuse, blocks on numerous wikis.--Jasper Deng (talk) 22:29, 21 July 2012 (UTC)

Hmm, 2 days ago on simple wiktionary and currently on meta, but does not seem to wreak immediate havoc. Pundit (talk) 22:50, 21 July 2012 (UTC)
Most of the abuse is deleted, or (in the case of mediawiki.org) caught by an abuse filter.--Jasper Deng (talk) 22:56, 21 July 2012 (UTC)
The user just does not seem to be overly active - one more strike and it makes sense to go global, at present, with just an IP, I don't see the immediate excuse. Pundit (talk) 23:03, 21 July 2012 (UTC)
And here's the strike.--Jasper Deng (talk) 03:48, 24 July 2012 (UTC)
Black check.svg Already done by Jyothis. Snowolf How can I help? 03:18, 25 July 2012 (UTC)

Global block for 78.157.220.0/24

Status:    Done

Cross-wiki spam per User:MF-Warburg/Unexisting image spam. Block the range, since this is a dedicated webhost range.--Jasper Deng (talk) 05:50, 22 July 2012 (UTC)

For the specific IP, Black check.svg Already done by Bsadowski1, for the range it seems overreaching as there are no policies against editing from web farms. Sure, at the evidence of abuse, we're likely to block such IPs much quicker and with less of a worry, but that doesn't mean that we should block every webfarm when single static ip blocks are likely to be just as effective. Snowolf How can I help? 03:22, 25 July 2012 (UTC)

Global block for 209.250.0.0/19

Status:    Done

Per User:MF-Warburg/Unexisting image spam. If the full range is not feasible, at least do 209.250.21.128/25, 209.250.22.10, and 209.250.14.0/24.--Jasper Deng (talk) 03:58, 18 July 2012 (UTC)

See also:209.104.216.91 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker.Érico msg 21:41, 19 July 2012 (UTC)
I just globally blocked 209.104.216.91 for 1 month - it doesn't fall under the /19 range. Trijnsteltalk 22:07, 19 July 2012 (UTC)
Probably not the same provider.--Jasper Deng (talk) 03:15, 20 July 2012 (UTC)
  • blocked 209.250.20.0/22 & 209.250.14.0/24 rather than the whole /19 — billinghurst sDrewth 06:13, 28 July 2012 (UTC)

Global block for 46.118.117.6

Status:    Done

Please consider blocking this cross-wiki vandal/spambot. Mathonius (talk) 07:42, 27 July 2012 (UTC)

Yes check.svg Done Snowolf How can I help? 01:17, 28 July 2012 (UTC)

Global block for 78.28.204.157

Status:    Done

He has been blocked at the en and lv wiki, but he continous vandalise on other wikis. --Edgars2007 (talk) 11:03, 27 July 2012 (UTC)

dine — billinghurst sDrewth 05:26, 28 July 2012 (UTC)

Global locks for IP

Status:    Done

cross-wiki spam --Ignacio Flag of Uruguay.svg (talk) 03:44, 28 July 2012 (UTC)

done — billinghurst sDrewth 05:22, 28 July 2012 (UTC)

Global locks for user

Status:    Done

Spambot --Ignacio Flag of Uruguay.svg (talk) 05:12, 28 July 2012 (UTC)

done — billinghurst sDrewth 05:24, 28 July 2012 (UTC)

Global block for 198.143.184.78

Status:    Done

Cross-wiki comment spammer.--Jasper Deng (talk) 05:13, 28 July 2012 (UTC)

done — billinghurst sDrewth 05:23, 28 July 2012 (UTC)

Global block for 59.56.44.151

Status:    Done

This cross-wiki spammer also spammed two hours ago, so a global block might be useful. Mathonius (talk) 03:42, 30 July 2012 (UTC)

Yes check.svg Done, might be worth considering a lenghtier block as it has been blocked in the past. Snowolf How can I help? 23:45, 31 July 2012 (UTC)


Requests for global (un)lock and (un)hiding

Global lock for user:Myiworld.in

Status:    Done

Account seems solely to promote their website - thanks --Herby talk thyme 14:06, 1 July 2012 (UTC)

Yes check.svg Done --Luckas msg 14:37, 1 July 2012 (UTC)

Global lock for user:6vca2xb1t

Status:    Done

Pattern bot puppet account - thanks --Herby talk thyme 16:33, 1 July 2012 (UTC)

Plus

Related account on same range on Commons --Herby talk thyme 16:35, 1 July 2012 (UTC)

done, thx — billinghurst sDrewth 16:39, 1 July 2012 (UTC)

Global lock for user:Salimcifci

Status:    Done

Placing an article (non en) apparently promoting a website on a number of wikis - thanks --Herby talk thyme 12:15, 2 July 2012 (UTC)

done & thx — billinghurst sDrewth 12:22, 2 July 2012 (UTC)

Global lock for user:Kripa89

Status:    Done

Spam only account - likely puppet - looking at that next - thanks --Herby talk thyme 07:15, 3 July 2012 (UTC)

Yes check.svg Done. Trijnsteltalk 10:39, 3 July 2012 (UTC)

Global lock for user:Universityhall007

Status:    Done

Spam, spam, spam, spam - thanks --Herby talk thyme 11:39, 3 July 2012 (UTC)

Yes check.svg Done. -- Mentifisto 11:54, 3 July 2012 (UTC)

Global lock for User:Luvthewiki

Status:    Done

Confirmed sockpuppet of BrandonSky, a cross-wiki socker, thanks to an enwiki CheckUser.--Jasper Deng (talk) 19:25, 3 July 2012 (UTC)

Already Yes check.svg Done by PeterSymonds. Trijnsteltalk 19:42, 3 July 2012 (UTC)

Global locks for pattern spambots

Status:    Done

The following accounts were all created within a couple of minutes, please lock and CU them. More will follow. Mathonius (talk) 03:23, 4 July 2012 (UTC)

As well as the following. There might be some duplicates.

I've added something to the title blacklist, which seems to work. Please note that these are only the ones I know of. Mathonius (talk) 03:37, 4 July 2012 (UTC)

Yes check.svg Done. Good catch. I think I locked them all. I also locked a few others following user name pattern.‴ Teles «Talk ˱@ L C S˲» 04:14, 4 July 2012 (UTC)

Global locks for CU'ed spambots

Status:    Done

Please lock the accounts mentioned here and here. Mathonius (talk) 19:41, 5 July 2012 (UTC)

Done.‴ Teles «Talk ˱@ L C S˲» 21:43, 5 July 2012 (UTC)

Global locks for Ipad3case357, Ipad3casesq3 and Ipad3case4q7

Status:    Done

Please consider locking and/or investigating these accounts, which were all created within a few minutes. Mathonius (talk) 05:56, 6 July 2012 (UTC)

Assuming all are spambots, done. — T. 10:29, 7 July 2012 (UTC)

Global lock for user:DJ-Fitö

Status:    Done

I think this guy is only here to promote his DJ business. Indef blocked on es wp and ignored all warnings and now blocked on Commons - thanks --Herby talk thyme 21:00, 8 July 2012 (UTC)

Yes check.svg Done. Trijnsteltalk 21:03, 8 July 2012 (UTC)

Global lock for Cicek-hediye

Status:    Done

Please lock this cross-wiki spammer. Mathonius (talk) 03:37, 10 July 2012 (UTC)

Yes check.svg Done by Luckas Blade. Mathonius (talk) 04:32, 10 July 2012 (UTC)

Global locks for pattern spambots

Status:    Done

Please lock and investigate these spambots (pattern Ml[a-z]{4}s[0-9][a-z]). Thanks, Mathonius (talk) 04:32, 10 July 2012 (UTC)

managed by Luckas Blade, — billinghurst sDrewth 04:44, 11 July 2012 (UTC)

Global unlock for Indonesian Ferry Roland accounts

Status:    Not done

Oh god,unlock these accounts because i nedeed it. I was use 12345help account.--12345help (talk) 04:33, 11 July 2012 (UTC)

This account has been locked too as yet another sockpuppet.--Jasper Deng (talk) 04:38, 11 July 2012 (UTC)

Global lock for Leppogl

Status:    Done

Holidays-info spammer socks. See also WM:SBL#bg-dest.us. Jafeluv (talk) 11:40, 11 July 2012 (UTC)

Yes check.svg Done. Trijnsteltalk 12:04, 11 July 2012 (UTC)

Global lock for cross wiki spam accounts

Status:    Done

Cross wiki link spammers - thanks --Herby talk thyme 09:07, 13 July 2012 (UTC)

Yes check.svg Done — MA (audiencia) 09:37, 13 July 2012 (UTC)

Global lock for puppet accounts

Status:    Done

Puppet accounts apparently - my ja is non existent however my CU is fairly fluent! All previous accounts on the IP are locked and these have exactly the same characteristics. The IP (re-blocked) was previously blocked for long term abuse. Thanks --Herby talk thyme 11:36, 15 July 2012 (UTC)

Done. Also gblocked the IP. -Barras talk 12:00, 15 July 2012 (UTC)

Global lock for Provoden

Status:    Done

Holidays-info spammer yet again, with new domain WM:SBL#bgvacation.info. Jafeluv (talk) 18:05, 15 July 2012 (UTC)

Yes check.svg Done. Trijnsteltalk 18:09, 15 July 2012 (UTC)

Global lock for Achat du coin

Status:    Done

Please lock this cross-wiki spam/advertising-only account. Thanks, Mathonius (talk) 11:47, 16 July 2012 (UTC)

Done. -Barras talk 12:03, 16 July 2012 (UTC)

Global lock for Anya1297

Status:    Done

This spambot might as well be locked. Perhaps a CU investigation is also useful. Anya1297 probably belongs to the same group as Yixiang0822 (talk • contribs • block • xwiki-contribs • xwiki-date • CA • ST • lwcheckuser), Lingshua5226 (talk • contribs • block • xwiki-contribs • xwiki-date • CA • ST • lwcheckuser) and Aosi7850 (talk • contribs • block • xwiki-contribs • xwiki-date • CA • ST • lwcheckuser). Trijnstel recently checked a couple of these, if I remember correctly. Mathonius (talk) 08:09, 18 July 2012 (UTC)

Yes check.svg Done: all the above-mentioned accounts have been locked. Mathonius (talk) 01:51, 20 July 2012 (UTC)

Global lock for Komachine

Status:    Done

Please lock this cross-wiki spam-only account. Mathonius (talk) 01:51, 20 July 2012 (UTC)

Done. --Millosh (talk) 13:01, 20 July 2012 (UTC)

Global lock for Textkorrektur and his/her sockpuppets

Status:    Not done

Please lock this user for abusing multiple accounts, see de:Wikipedia:Checkuser/Anfragen#(6. Juni) - Email-Anfrage on German Wikipedia. --IusticiaBY (talk) 18:42, 7 July 2012 (UTC)

Are there any indications of abuse of these sockpuppets outside of de-wp? --AFBorchert (talk) 20:04, 7 July 2012 (UTC)
I don't really see problems outside dewiki actually. If they aren't abusive elsewhere, I see no real reason to block them. That looks rather like a dewiki-only problem. -Barras talk 21:44, 8 July 2012 (UTC)
Abuse of multiple accounts, the reason provided for this request, is not enough for a mass lock on its own. It looks indeed like a problem specific to dewiki, and best handled with local tools rather than the blunt weapon that a global lock is. Please feel free to reopen if we're missing something. Snowolf How can I help? 03:28, 25 July 2012 (UTC)

Global locks for cross-wiki pattern spambots

Status:    Done

The above-mentioned accounts are all pattern accounts. Some of them have been investigated on ik.wiktionary and Commons, see commons:Commons:Requests for checkuser/Case/H0cjqn4l. Along with the accounts mentioned there and in the RC feed on ik.wiktionary, this list might be complete. Please lock all of these accounts. A checkuser investigation on the English Wiktionary will be very useful, but they still haven't responded to my request. Mathonius (talk) 04:43, 27 July 2012 (UTC)

Yes check.svg All locked except for Brentkgvy49, Paezrhd29, Karlwkd20, Temmewchw92, Kurtdnx89. I prefer to wait the CU result at enwiktionary. As I've been away for almost a month, I don't know exactly what's the way spambots act right now. Other stewards may feel free to lock these ones if they have enough clue these accounts have been created to spam. Thanks for your precious help ! -- Quentinv57 (talk) 07:16, 27 July 2012 (UTC)
Thank you! Mathonius (talk) 07:42, 27 July 2012 (UTC)

Fyi, I began compiling a list at User:Mathonius/Reports/Twin spambots. Mathonius (talk) 21:44, 27 July 2012 (UTC)

Global locks for username vandal

Status:    Done

These accounts might as well be locked, see [5] for more info. Mathonius (talk) 19:41, 27 July 2012 (UTC)

D. -Barras talk 19:43, 27 July 2012 (UTC)

Global lock for Vândalo de primeira

Status:    Done

Vandalism-only account, created only in Portuguese Wikipedia and Wikibooks. --Francisco (talk) 02:47, 26 July 2012 (UTC)

Yes check.svg Done --Luckas msg 18:59, 28 July 2012 (UTC)

Global lock for Arpabone

Status:    Not done

Interwiki vandal. --. HombreDHojalata.T A L K 13:03, 26 July 2012 (UTC)

User has valid contributions on a number of wikis. --Millosh (talk) 17:38, 26 July 2012 (UTC)
Not done at this time. There are good edits, that would tend to indicate that not completely interwiki vandal from the evidence provided. — billinghurst sDrewth 14:16, 28 July 2012 (UTC)

Global lock for spambots

Status:    Done
  • Spambots.Érico msg 00:06, 29 July 2012 (UTC)
Done by Jyothis.‴ Teles «Talk ˱@ L C S˲» 02:21, 29 July 2012 (UTC)

Global lock for DJPaulVanDyk

Status:    Done

Cross-wiki vandalisms (he really wanted to say Carl Cox "happy birthday"). -- 131.107.0.95 16:34, 30 July 2012 (UTC)

already done --Melos (talk) 07:34, 31 July 2012 (UTC)

Global lock for Insitblog34

Status:    Done

Please lock this cross-wiki spammer. Mathonius (talk) 02:39, 31 July 2012 (UTC)

already done --Melos (talk) 07:35, 31 July 2012 (UTC)

Global lock for Nflnhlmlbnbajerseys

Status:    Done

Spambot. Might be worth checking for more related accounts. --Savhñ 07:10, 31 July 2012 (UTC)

done --Melos (talk) 07:35, 31 July 2012 (UTC)

Global lock for 97customusb et cetera

Status:    Done

Please consider locking these pattern spambots. Mathonius (talk) 07:42, 31 July 2012 (UTC)