Steward requests/Global/2018-04

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search
Warning! Please do not post any new comments on this page. This is a discussion archive first created on 01 April 2018, although the comments contained were likely posted before and after this date. See current discussion.

Contents

Requests for global (un)block[edit]

Global block for 120.37.186.146[edit]

Status:    Done

Szm, the flag vandal. --jdx Re: 13:09, 1 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 13:55, 1 April 2018 (UTC)

Global blockfor 116.237.18.33[edit]

Status:    Done

Sock of LTA User:Assoc. --Xiplus (talk) 09:12, 1 April 2018 (UTC)

Done. Stryn (talk) 10:44, 2 April 2018 (UTC)

Global block for 187.45.179.164/31[edit]

Status:    Done

A leaky hosting (hostdime.com). The former IP is blocked in zh.Wikipedia as a proxy. The latter IP is currently trolling on Commons. Incnis Mrsi (talk) 16:41, 21 March 2018 (UTC)

Yes check.svg Done--Alaa :)..! 19:27, 4 April 2018 (UTC)

Global block for 67.188.179.66[edit]

Status:    Not done

Edited in fr,en,zh,es,vi,ru wikis.I noticed he likes editing war, it does not matter now.

123
I care about these three links. These three links tell us that 67.188.179.66 said that the first and third links were wrong. But the first link was edited by 67.188.179.66. Only two possibilities, he was disturbing in ZH or he used 107.77.213.166 negating his own edit . --O1lI0 (talk) 05:04, 25 March 2018 (UTC)

X mark.svg Not done still editing, and it's not blocked until now --Alaa :)..! 19:31, 4 April 2018 (UTC)

Global block for 190.232.78.132[edit]

Status:    Done

That IP was spamming sites with virus, like would be officials, in articles on wikipedias. --Mr. Fulano! Talk 20:20, 4 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 06:53, 5 April 2018 (UTC)

Global block for 116.237.18.33[edit]

Status:    Done

Sock of User:Assoc. Long term disruptive editing. --Xiplus (talk) 02:48, 7 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 04:46, 7 April 2018 (UTC)

Global block for 50.81.55.184[edit]

Status:    Done

Cross-wiki vandalism.   — Jeff G. ツ 06:23, 7 April 2018 (UTC)

Yes check.svg Done. Green Giant (talk) 13:57, 7 April 2018 (UTC)

Global block for 80.243.185.128/25[edit]

Status:    Done

A leaky colocation hosting blocked in en and zh.wikipedias. 80.243.185.144 cross-wiki-contribs ST IP info robtexgblockglist was recently used on Commons to make personal attacks (likely by a globally banned person). Incnis Mrsi (talk) 16:59, 21 March 2018 (UTC)

Yes check.svg Done --Alaa :)..! 12:33, 8 April 2018 (UTC)

Global block for 115.74.187.91[edit]

Status:    Done

Spambot or spamming zombie, see SBL log and stalk toy. Already blocked on de:wp and commons. --Achim (talk) 10:32, 8 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 12:34, 8 April 2018 (UTC)

Global block for 218.255.66.98[edit]

Status:    Done

Cross-wiki vandalism. --Xiplus (talk) 10:53, 8 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 12:03, 8 April 2018 (UTC)

Global block for 2A01:E35:2FE0:D7A0:DD02:FB15:FFB3:6BDE[edit]

Status:    Done

IP used by globally locked user Parissa Official. IP edits the same non-notable subjects as the aforementioned across various wikis; various cross-wiki spam issues. --hiàn 21:49, 8 April 2018 (UTC)

Yes check.svg Done. @Hián: cheers. Green Giant (talk) 22:32, 8 April 2018 (UTC)

Global block for 216.49.119.70[edit]

Status:    Done

Persistent vandalism at Meta and other projects. The IP actually got blocked at enwiki too for vandalism today. Also en wiktionary I think. -★- PlyrStar93. Message me. 00:43, 10 April 2018 (UTC)

Yes check.svg DoneDefender (talk) 01:54, 10 April 2018 (UTC)

Global block for 209.239.97.38[edit]

Status:    Done

Vandalism in enwiki, enwikiversity and meta. Previously edited as 216.49.119.70 (same ISP, close geolocation). -★- PlyrStar93. Message me. 02:20, 12 April 2018 (UTC)

Done. Stryn (talk) 02:22, 12 April 2018 (UTC)

Global block for 42.62.202.197[edit]

Status:    Done

On it.wiki, he constantly turns various articles to redirects since at least 2 years with various IP addresses, this one being only the last one (check it:The Walt Disney Company's history, for example).

I just realized he's been doing the same cross-wiki. --Titore (talk) 11:42, 13 April 2018 (UTC)

Done by Vituzzu for 1 month, is a long-term abuser. SA 13 Bro (talk) 13:01, 13 April 2018 (UTC)

Global block for 2A01:E35:2FE0:D7A0:CC28:429F:412E:638B[edit]

Status:    Done

IP address used by globally locked user Parissa Official. Spam characteristic of other sockpuppets. --hiàn 02:11, 11 April 2018 (UTC)

@Hiàn: I see that all of this IP activity on simple.wikipedia, but it's not blocked there? so it's a local issue--Alaa :)..! 09:02, 14 April 2018 (UTC)
There was also spam on Wikidata, before the item in question was deleted. hiàn 16:58, 14 April 2018 (UTC)
Yes check.svg Done --Alaa :)..! 17:00, 14 April 2018 (UTC)

Global block for 213.200.15.168[edit]

Status:    Done

Cross-wiki spam of non-notable actor. IP used by Mokledauf, locked as a result of a request below, to spam. --hiàn 23:50, 14 April 2018 (UTC)

Done by Green Giant. SA 13 Bro (talk) 21:27, 15 April 2018 (UTC)

Global block for 216.49.117.44[edit]

Status:    Done

Cross-wiki nonsense edits, look at the contributions on English Wikipedia and here as well. SA 13 Bro (talk) 23:49, 15 April 2018 (UTC)

Yes check.svg Done by Stryn --Alaa :)..! 20:19, 16 April 2018 (UTC)

Global block for parts of 209.239.96.0/22[edit]

Status:    Done

Cross-wiki vandalism. Incnis Mrsi (talk) 20:56, 14 April 2018 (UTC)

Tegel globally blocked the range 209.239.96.0/20 for 1 week. SA 13 Bro (talk) 05:37, 17 April 2018 (UTC)

Global block for 2600:8800:3981:7A80:194E:E87A:2510:F53C[edit]

Status:    Done

Disruptive activity in a dosen of wikis. Adding machinetranslations, making loads of minor edits. Already blocked on vls.wikipedia for 1 year ("mass spam of machine translations (global sysop action) on vls.wikipedia"). Looks like a static IP.

global edits Kind regards,  Rodejong  💬 ✉️  22:04, 17 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 22:34, 17 April 2018 (UTC)

Continues as

IMHO only a /64 block—Special:GlobalBlock/2600:8800:3981:7A80::/64—makes sense here. Incnis Mrsi (talk) 19:43, 18 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 21:42, 18 April 2018 (UTC)

Global block for 216.49.118.143[edit]

Status:    Done

Cross-wiki abuse, nonsense edits again. SA 13 Bro (talk) 18:56, 18 April 2018 (UTC)

@Tegel: This IP editor properly User:Skiyomi. SA 13 Bro (talk) 19:03, 18 April 2018 (UTC)
Range-blocked by Ajraddatz. SA 13 Bro (talk) 10:00, 20 April 2018 (UTC)

Global block 206.189.52.136[edit]

Status:    Done

Open proxy, block evasion by Liza Veniza, long-term abuse. Marshmallych ?! 16:21, 20 April 2018 (UTC)

VPN by DigitalOcean, LLC. [1]. --Well-Informed Optimist (talk) 16:53, 20 April 2018 (UTC)

Gblocked the /16 range for NOP. — regards, Revi 17:54, 20 April 2018 (UTC)

Global block for 36.102.223.115[edit]

Status:    Done

Disruptive activity in a dosen of wikis. Addition of template-like pages into main namespace be:b:Шаблон (English literally: "Template"). Already blocked in ruwiki for vandalism, linked to previously blocked 36.102.223.81 cross-wiki-contribs ST IP info robtexgblockglist. Maybe it is worth blocking an IP range? --Jarash 10:51, 16 April 2018 (UTC)

Yes check.svg Done for two IPs. We can't block the range, there will be a bug collateral damage --Alaa :)..! 21:15, 21 April 2018 (UTC)

Global block 79.44.154.118[edit]

Status:    Done

Lock evasion by Alec Smithson. All contribs should be nuked. Thank you, Justlettersandnumbers (talk) 09:20, 20 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 21:09, 21 April 2018 (UTC)

Global block for 79.19.187.162[edit]

Status:    Done

Cross-wiki vandalism, probably is an IP of a sockmaster of itwiki. --Mr. Fulano! Talk 19:26, 20 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 14:22, 21 April 2018 (UTC)

Global block for 103.13.228.0/23[edit]

Status:    Done

A spam house, see http://www.barracudacentral.org/reputation?r=1&ip=103.13.228.104 and similar. 103.13.228.104 is in use (see ru:Special:Contribs/103.13.228.104) by a copyvioman and vicious puppeteer #Global lock for 8 socks of Ven0m2014. Blocked in en.Wikipedia. Incnis Mrsi (talk) 09:08, 23 April 2018 (UTC)

Yes check.svg Done — regards, Revi 12:28, 23 April 2018 (UTC)

Global blocks for spambot webhosts[edit]

Status:    Done

Webhosts used by spambots. MER-C (talk) 12:18, 30 March 2018 (UTC)

IPVanish VPN used for spamming. MER-C (talk) 13:59, 30 March 2018 (UTC)

PureVPN plus webhost range used for spamming. MER-C (talk) 16:29, 16 April 2018 (UTC)

  • [2] GZ systems = PureVPN. Doing some... — regards, Revi 18:08, 20 April 2018 (UTC)

Same spam, different day. MER-C (talk) 17:08, 21 April 2018 (UTC)

All done, specific notes in it. — regards, Revi 08:28, 24 April 2018 (UTC)
Thank you. I'm sure I'll be back... MER-C (talk) 20:18, 24 April 2018 (UTC)

Global block for 2605:380:32:495:43F2:A1::/96[edit]

Status:    Not done

Please, hard-block for a year. It seems to me that the entire /96 IPv6 range, or at very least 2605:380:32:495:43F2:A1::/112 cross-wiki-contribs ST IP info robtexgblockglist—216 addresses—is allocated to a globally banned long-term abuser or somebody impersonating him. See c:Special:Contributions/2605:380:32:495:43F2:A1::/112 for details, note two distinct IPv6s. Incnis Mrsi (talk) 19:29, 26 March 2018 (UTC)

From a theoretical point of view minimum prefix length to block should be 64 bits. --Vituzzu (talk) 19:32, 26 March 2018 (UTC)
Blocked IPv6 prefixes both broader and narrower than /64 exist in Wikimedia. The former are up to /32 which is rather common in en.Wikipedia. The latter are usually point blocks (/128), but sometimes /96. From my layman’s understanding, IPv6 prefix specification may “theoretically” be any integer from /0 to /128 inclusively, although MediaWiki refuses to handle anything broader than /32 for security reasons. If one can mount a valid objection against blocking this /96—an insignificant portion of all IPv6 Internet—then formulate it clearer, please. I have difficulty comprehending an oracle’s remark above. Incnis Mrsi (talk) 21:02, 26 March 2018 (UTC)
Keeping it simple: prefixes longer than 64 bits shouldn't be assigned to different customers at the same time, per standard. Also this clearly an open proxy, so I blocked 2605:380:32:495::/64 instead. --Vituzzu (talk) 22:12, 25 April 2018 (UTC)

Global block for 12.164.247.34[edit]

Status:    Done

IP on a hosting with poor reputation blocked in en.Wikipedia. Used by a copyvioman and vicious puppeteer #Global lock for 8 socks of Ven0m2014 to edit-war in (now deleted) c:File:Naomi Watts L45.jpg. Incnis Mrsi (talk) 09:37, 23 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 10:03, 25 April 2018 (UTC)

Global block for 85.132.107.187[edit]

Status:    Done

Yet another block evasion by Ven0m2014 – warring in c:File:Naomi Watts H67.jpg; also see az:Special:Contribs/85.132.107.187. Incnis Mrsi (talk) 17:17, 23 April 2018 (UTC)
It may be an open proxy. Incnis Mrsi (talk) 07:41, 24 April 2018 (UTC)
Stewards, what are you waiting for? The IP pushed copyvio into ru.Wikipedia few hours ago. Incnis Mrsi (talk) 18:49, 24 April 2018 (UTC)
P.S. In fact two adjacent IPs are used, so Special:GlobalBlock/85.132.107.186/31 may be a better target for block. See https://tools.wmflabs.org/guc?user=85.132.107.186&blocks=true --Incnis Mrsi (talk) 19:26, 24 April 2018 (UTC)
And more copyvio pushing across wikipedias. Incnis Mrsi (talk) 09:02, 25 April 2018 (UTC)

Yes check.svg Done but stop trolling to attract attention. --Vituzzu (talk) 09:32, 25 April 2018 (UTC)

Global block for spambot network 2405:204:C204:8972:A886:0:0:0/64[edit]

Status:    Done

This network was used by a spambot to commit cross-wiki spamming. The actual network/webhost of the spammer may be larger than the one I had listed. I had to go to different Wikimedia sites just to revert their spam edits. The IP range should also be checked for sleepers, because many of these prolific spammers are known to be LTAs. Please Globally Rangeblock this range for at least 3 months (set to "anon-only"), because the operator of this IP was spamming recently. LightandDark2000 (talk) 23:01, 24 April 2018 (UTC)

@LightandDark2000: please, fix the range notation. If you want …:A886:… to be significant, then it must be /80 or narrower. If you want a /64, then specify it as 2405:204:C204:8972::/64. Incnis Mrsi (talk) 05:28, 25 April 2018 (UTC)
Yes check.svg Done /64 shouldn't be subnetted, though this is a mobile range there are no proves it is chunked into smaller non standard networks. --Vituzzu (talk) 09:32, 25 April 2018 (UTC)

Global unblock for 201.83.75.15[edit]

Status:    Not done

I tried to edit a Wikipedia page today, but it seems my IP is blocked. May I be unblocked, please? Thanks in advance.

This is what I saw, including my IP:

"You do not have permission to edit this page, for the following reason:

Your IP address has been blocked on all wikis.

The block was made by Vituzzu (meta.wikimedia.org). The reason given is m:NOP .

Start of block: 07:58, 21 January 2018 Expiry of block: 07:58, 21 January 2019 Your current IP address is 201.83.75.15. Please include all above details in any queries you make.

If you believe you were blocked by mistake, you can find additional information and instructions in the No open proxies global policy. Otherwise, to discuss the block please post a request for review on Meta-Wiki."

--Daniel Carrero (talk) 12:06, 25 April 2018 (UTC)

X mark.svg Not done sorry but open proxies cannot be unblocked. --Vituzzu (talk) 21:57, 25 April 2018 (UTC)
@Vituzzu: I'm not using an open proxy. Is there any way to know if I'm using an open proxy against my will? I certainly never opted-in for an open proxy. I'm just using my normal internet connection.
For the record, I know what an open proxy is. I'm just surprised of being blocked like I'm using one, when I'm not. Maybe someone on your end made a mistake and blocked the wrong IPs? --Daniel Carrero (talk) 05:32, 26 April 2018 (UTC)

Question[edit]

Status:    Not done

Why did you block the whole institution ?!217.75.198.138 11:47, 27 April 2018 (UTC)

The address 217.75.198.138 is globally blocked because the user:Yahadzija operates from there, who is banned from all Wikimedia sites. “The whole institution”, namely Institute for Genetic Engineering and Biotechnology in Sarajevo, is not currently blocked. Incnis Mrsi (talk) 12:16, 27 April 2018 (UTC)

Global block for 106.187.0.0/16[edit]

Status:    Not done

Colocated webhosts with open proxies and active blocks on 10 wikis.   — Jeff G. ツ 12:56, 29 March 2018 (UTC)

@Jeff G.: I see 106.187.0.0/18 cross-wiki-contribs ST IP info robtexgblockglist and 106.187.96.0/21 cross-wiki-contribs ST IP info robtexgblockglist blocked in en. in ru.wikipedias, but these ranges combined are more than three times smaller than /16. In which namely wikis such large range as /16 is blocked? In any case, a more solid substantiation should be presented for request to block 216 IPv4 addresses. Incnis Mrsi (talk) 06:22, 30 March 2018 (UTC)
@Incnis Mrsi: Please see this block log (in Japanese) at Japanese Wiktionary.   — Jeff G. ツ 10:29, 30 March 2018 (UTC)
I wasn't able to find solid evidences of these subnets being allocated to colocation/webhosting services: KDDI is active also in transit, residential and other kind of services which shouldn't be blocked. --Vituzzu (talk) 13:16, 28 April 2018 (UTC)

Global block for 100.33.95.23[edit]

Status:    Done

Cross-wiki spam/scam --Titore (talk) 01:01, 29 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 07:12, 29 April 2018 (UTC)

Downgrade global block for 195.191.241.14 to anon-only[edit]

Status:    Not done

See diff and http://multirbl.valli.org/lookup/195.191.241.14.html – it is not an open proxy. @Vituzzu:
Incnis Mrsi (talk) 19:29, 30 April 2018 (UTC)

Source of spam in a colocation facility, with a clear pattern along with other proven OPs. Most of times people are caught by blocks because of bogus configurations or malicious softwares. --Vituzzu (talk) 20:00, 30 April 2018 (UTC)

Requests for global (un)lock and (un)hiding[edit]

Global lock for spambots[edit]

Status:    Done

Spambots. Wiki13 talk 23:16, 31 March 2018 (UTC)

Yes check.svg Done with several additional accounts revealed by checkuser. Green Giant (talk) 10:37, 1 April 2018 (UTC)

Global lock for LTA User:Vandyrandy[edit]

Status:    Done

See the previous report above (User:Vantyrandeee). This account (User:Vandyrandy) is the master account of the LTA's sockfarm. Given the cross-wiki abuse, this account should be Locked as the sockmaster. Stewards should also note that this LTA has a history of impersonating some other LTAs and attacking other users with Neo-Nazi slogans. The other socks of Vandyrandy can be seen here at his SPI on the English Wikipedia; Stewards may also Lock those accounts if they find it necessary. LightandDark2000 (talk) 23:22, 31 March 2018 (UTC)

Yes check.svg Done. Additionally locked four confirmed puppets:
Green Giant (talk) 17:48, 1 April 2018 (UTC)

Global lock for C12468907[edit]

Status:    Done

Cross-wiki vandalism. After blocked on zhwiki, do the same edits on zh-yue wiki. --Xiplus (talk) 02:32, 1 April 2018 (UTC)

Yes check.svg DoneAjraddatz (talk) 03:01, 1 April 2018 (UTC)

Global lock for Hindio2001[edit]

Status:    Done

WP0 abuser. --jdx Re: 08:30, 1 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 10:40, 1 April 2018 (UTC)

Global lock for several spambots[edit]

Status:    Done

Spambots, blocked on nl.wiktionary for repeated attempts to add blacklisted spamlinks --MarcoSwart (talk) 08:52, 1 April 2018 (UTC)

Yes check.svg Done Cheers. —Green Giant (talk) 09:50, 1 April 2018 (UTC)

Global lock for socks of Black Magic Spambot LTA[edit]

Status:    Done
  • Two additional accounts confirmed by checkuser:

This is another sock of the "Black Magic" spammer LTA, who has been socking and spamming for over 6 months now. Given the recent spate of spambot creation by this LTA, I strongly suggest that Stewards run a Sleeper Check for more socks. In addition, the underlying IP range needs to be Globally Rangeblocked for at least a few months, in order to stop the cross-wiki abuse and spambot creation. LightandDark2000 (talk) 09:38, 1 April 2018 (UTC)

Yes check.svg Done with two accounts that registered just minutes ago. IP also blocked for a week. Green Giant (talk) 09:47, 1 April 2018 (UTC)

Global lock for Vivia 01[edit]

Status:    Done

WP0 abusers. --jdx Re: 10:16, 1 April 2018 (UTC)

Additional accounts locked after checkuser:
Gomes Julio (talk • contribs • block • x-wiki • CA • lwcheckuser)
Gibson Pedro (talk • contribs • block • x-wiki • CA • lwcheckuser)
Portalgs (talk • contribs • block • x-wiki • CA • lwcheckuser)
Gibson da Silva (talk • contribs • block • x-wiki • CA • lwcheckuser)
Gibson Liima (talk • contribs • block • x-wiki • CA • lwcheckuser)
Mirelson1 (talk • contribs • block • x-wiki • CA • lwcheckuser)
Yes check.svg DoneGreen Giant (talk) 13:17, 1 April 2018 (UTC)

Global lock for Manda 1993 (2)[edit]

Status:    Done

Long-term abuse. --Ilzhabimantara (talk) 10:36, 1 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 13:09, 1 April 2018 (UTC)

Global lock for Wonder News[edit]

Status:    Done

WP0 abuser. --jdx Re: 14:13, 1 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 14:19, 1 April 2018 (UTC)

Global lock for Fliegende Ostereier[edit]

Status:    Done

Avoided should be avoided --Schniggendiller (talk) 14:44, 1 April 2018 (UTC)

Already done earlier with ten further accounts revealed by checkuser, listed above. Green Giant (talk) 17:38, 1 April 2018 (UTC)

Global lock for 影武者(Nipponese Dog Calvero)[edit]

Status:    Done

--Lanwi1(talk) 15:40, 1 April 2018 (UTC)

Yes check.svg DoneDefender (talk) 18:16, 1 April 2018 (UTC)

Global lock for LTA[edit]

Status:    Done

Long-term abuse. SA 13 Bro (talk) 21:53, 1 April 2018 (UTC)

Yes check.svg Done - TNT 21:55, 1 April 2018 (UTC)

Global lock for Dumbaustin2010[edit]

Status:    Done

Cross-wiki abuse, vandalism at multiple projects. No constructive edits at any other projects. -★- PlyrStar93. Message me. 23:11, 1 April 2018 (UTC)

Locked. – Ajraddatz (talk) 23:42, 1 April 2018 (UTC)

Global lock for Parissa Official sock[edit]

Status:    Done

Long-term abuse. Sockmaster was previously locked by Alaa. --hiàn 21:55, 1 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 01:42, 2 April 2018 (UTC)

Global lock for Alexan New[edit]

Status:    Done

WP0 abuser. --jdx Re: 23:50, 1 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 01:43, 2 April 2018 (UTC)

Global lock for socks of cross-wiki LTA Tamara787[edit]

Status:    Done

These are the latest instances of cross-wiki abuse from the LTA User:Tamara787. Given the recent cross-wiki abuse, I strongly suggest that Stewards run a Sleeper Check on the IP range Globally to search for any more potential socks. Tamara787 is known for re-using years-old sock accounts and locally-blocked socks to vandalize other wiki sites, which is why all of his sock accounts, even the extremely old ones, need to be Globally Locked. In addition, since Tamara787 is now using his IP Range to create sock accounts across multiple Wikimedia sites, his IP Range needs to be Globally Rangeblocked for 2+ months to enforce his local rangeblocks and account locks. By the way, Stewards should note that this LTA was recently using his IP range's talk page access to troll other editors, even while blocked (locally). LightandDark2000 (talk) 01:49, 2 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 11:06, 2 April 2018 (UTC)

Global lock for sock puppets of My Royal Young[edit]

Status:    Done

Sock puppets of My Royal Young. --jdx Re: 02:21, 2 April 2018 (UTC)

Done, all locked by علاء (Alaa). SA 13 Bro (talk) 10:42, 2 April 2018 (UTC)

Global lock for socks of LTA Vandyrandy (2)[edit]

Status:    Done

— Separate group:

These are the latest socks of the LTA User:Vandyrandy. Vandyrandy is known for cross-wiki vandalism and socking, as well as impersonating other LTAs. In addition, Vandyrandy is known to attack other users and vandalize pages with Neo-Nazi slogans. Requesting a Global Sleeper Check, given the recent socking spree. His underlying IP ranges need to be Globally Rangeblocked, if they haven't been already. Also, his IP Global Rangeblock needs to be extended to 3-6 months to cut off further abuse; that IP range has a long history of abuse and personal attacks, and Vandyrandy had resumed socking and vandalism immediately after his earlier rangeblock had expired. LightandDark2000 (talk) 02:32, 2 April 2018 (UTC)

I'm actually not that sure about the last 2 named accounts, but the naming pattern is quite similar. LightandDark2000 (talk) 02:55, 2 April 2018 (UTC)
Yes check.svg Done. The last two appear to be part of a separate and quite possibly unrelated group. —Green Giant (talk) 11:28, 2 April 2018 (UTC)

Global lock for vandalism accounts[edit]

Status:    Done

Cross-wiki abuse; username issues, etc. -★- PlyrStar93. Message me. 03:08, 2 April 2018 (UTC)

Yes check.svg Done — regards, Revi 08:10, 2 April 2018 (UTC)

Global lock for Brene100[edit]

Status:    Done

Cross-wiki abuse, vandalism. -★- PlyrStar93. Message me. 05:19, 2 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 10:08, 2 April 2018 (UTC)

Global lock for Zacharycook597[edit]

Status:    Done

Cross-wiki abuse. -★- PlyrStar93. Message me. 05:30, 2 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 10:07, 2 April 2018 (UTC)

Global lock for 8 socks of LTA My Royal Young[edit]

Status:    Done

This long-term vandal nowadays harasses mostly Wikimedia Commons. Stewards, take care please about new IP range(s) where does this obnoxious person operate. Incnis Mrsi (talk) 06:41, 2 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 10:15, 2 April 2018 (UTC)

Global lock for 影武者(Nipponese Dog Calvero)[edit]

Status:    Done

--Lanwi1(talk) 10:13, 2 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 10:15, 2 April 2018 (UTC)

Global lock for HaydenFetherston[edit]

Status:    Done

Spambot, blocked on nl.wiktionary after triggering global filter 72 --MarcoSwart (talk) 10:25, 2 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 10:42, 2 April 2018 (UTC)

Global lock for 影武者(Nipponese Dog Calvero)[edit]

Status:    Done

--Lanwi1(talk) 10:29, 2 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 20:03, 2 April 2018 (UTC)

Global lock for sock of LTA User:Zacharycook597[edit]

Status:    Done

Cross-wiki sock of the Globally Locked vandal, Zacharycook597. Cross-wiki vandalism is obvious from this sock. Given the recent socking activity, Stewards should Check the underlying IPs for Sleepers, and any additional accounts need to be Locked as well. Given the recent socking and cross-wiki abuse, the underlying IP(s) should be Globally Blocked. LightandDark2000 (talk) 10:46, 2 April 2018 (UTC)

Yes check.svg Done but no other accounts found. —Green Giant (talk) 11:32, 2 April 2018 (UTC)

Global lock for Billinghurst1[edit]

Status:    Done

Impersonation of User:Billinghurst (global rollbacker and global sysop). blocked on 2 wikis for vandalism.

Second account is a vandal as well. The person it seems always to use 2 accounts at one time to vandalize, so its the same person as the impersonation account.

They probably are Wikinger based on this.

--Artix Kreiger (Message Wall) 15:25, 2 April 2018 (UTC)

Both are done. Stryn (talk) 15:53, 2 April 2018 (UTC)

Global lock for bnwiki linkspammers[edit]

Status:    Done

The domain "advids.co" should probably be globally blacklisted. Also c:File:Advids Review.jpg and c:File:Reviews About Advids.jpg could be related. Mahir256 (talk) 15:52, 2 April 2018 (UTC)

Yes check.svg Done Ruslik (talk) 20:53, 2 April 2018 (UTC)

Global lock for socks of Avoided (or an impostor)[edit]

Status:    Done

Please lock his socks (they’re all from today), check the underlying IPs and block IPs and as well additional accounts, if found. If blocked locally, but not locked globally, it will be probably end like this. Regards --Schniggendiller (talk) 20:43, 2 April 2018 (UTC)

Symbol wait.svg Doing... Trijnsteltalk 20:48, 2 April 2018 (UTC)
All Yes check.svg Done, as good as I can. Please report back to me if he returns. Thank you. Trijnsteltalk 21:26, 2 April 2018 (UTC)

Global lock for Jesus-news[edit]

Status:    Done

WP0 abusers. --jdx Re: 01:51, 3 April 2018 (UTC)

Yes check.svg Done together with ten additional sleeper accounts. @Jdx: Cheers. —Green Giant (talk) 02:04, 3 April 2018 (UTC)

Global lock for spam accounts[edit]

Status:    Done

Spambots. -★- PlyrStar93. Message me. 03:36, 3 April 2018 (UTC)

Yes check.svg Done together with a bonus sleeper. @PlyrStar93: Cheers. —Green Giant (talk) 03:48, 3 April 2018 (UTC)

Global lock for LTA sock[edit]

Status:    Done

ISECHIKA. See also commons:Category:Sockpuppets of いせちか国際空港. -★- PlyrStar93. Message me. 03:50, 3 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 03:53, 3 April 2018 (UTC)

Global lock for cross-wiki abuse accounts[edit]

Status:    Done

Cross-wiki issues, not all accounts are related. The third one is Vandyrandy with other socks disrupting different projects recently. -★- PlyrStar93. Message me. 04:14, 3 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 04:27, 3 April 2018 (UTC)

Global lock for Med elou[edit]

Status:    Done

WP0 abuse. -★- PlyrStar93. Message me. 04:14, 3 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 04:28, 3 April 2018 (UTC)

Global lock for 影武者(Nipponese Dog Calvero)[edit]

Status:    Done

--Lanwi1(talk) 10:29, 2 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 20:03, 2 April 2018 (UTC)

Global lock for Jesus-news[edit]

Status:    Done

WP0 abusers. --jdx Re: 01:51, 3 April 2018 (UTC)

Yes check.svg Done together with ten additional sleeper accounts. @Jdx: Cheers. —Green Giant (talk) 02:04, 3 April 2018 (UTC)

Global lock for spam accounts[edit]

Status:    Done

Spambots. -★- PlyrStar93. Message me. 03:36, 3 April 2018 (UTC)

Yes check.svg Done together with a bonus sleeper. @PlyrStar93: Cheers. —Green Giant (talk) 03:48, 3 April 2018 (UTC)

Global lock for LTA sock[edit]

Status:    Done

ISECHIKA. See also commons:Category:Sockpuppets of いせちか国際空港. -★- PlyrStar93. Message me. 03:50, 3 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 03:53, 3 April 2018 (UTC)

Global lock for cross-wiki abuse accounts[edit]

Status:    Done

Cross-wiki issues, not all accounts are related. The third one is Vandyrandy with other socks disrupting different projects recently. -★- PlyrStar93. Message me. 04:14, 3 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 04:27, 3 April 2018 (UTC)

Global lock for Med elou[edit]

Status:    Done

WP0 abuse. -★- PlyrStar93. Message me. 04:14, 3 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 04:28, 3 April 2018 (UTC)

Global lock for 影武者(Nipponese Dog Calvero)[edit]

Status:    Done

--Lanwi1(talk) 05:05, 3 April 2018 (UTC)

Yes check.svg Done together with two more accounts, although the checkuser showed an additional six accounts credited to ISECHIKA or an imitator. @Lanwi1: Cheers. —Green Giant (talk) 10:58, 3 April 2018 (UTC)
@Green Giant:丁宜蘭's edit behavior conformity with Nipponese Dog Calvero. Nipponese Dog Calvero is using proxy IP? --Lanwi1(talk) 15:57, 3 April 2018 (UTC)
@Lanwi1: Yes, it is very possible that NDC is mimicking but I’ve blocked the underlying IP as a precaution. Green Giant (talk) 16:01, 3 April 2018 (UTC)
@Lanwi1: NDC has been using proxy IP's lately (unless someone else is really good at being his imposter). Can't think of this edit being made by anyone else. Also this is another proxy IP I reported at zhwiki. -★- PlyrStar93. Message me. 17:12, 3 April 2018 (UTC)

Global lock for Joice Nado[edit]

Status:    Done

WP0 abuse. --Crt 07:23, 3 April 2018 (UTC)

Yes check.svg Done - TNT 09:01, 3 April 2018 (UTC)
Lock conflicted, done by Vituzzu ._. - TNT 09:01, 3 April 2018 (UTC)

Global lock for spambot[edit]

Status:    Done

Obvious spambot account. The edits of this account also suggest that its operator could be a scammer as well. LightandDark2000 (talk) 07:44, 3 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 10:03, 3 April 2018 (UTC)

Global lock for socks of Black Magic spammer LTA[edit]

Status:    Done

These are all socks of the "Black Magic" spammer LTA. This spammer is known for cross-wiki abuse and spamming, and the user has been socking and spamming for over 6 months now. I'm starting to grow tired of dealing with this. Given the recent socking spree, I strongly suggest Stewards to Check the underlying IP range and the listed sock accounts. By the way, the IP range listed needs to be Globally Rangeblocked for at least 6 months (3 months is the absolute minimum, though 6 months would be more suitable for stopping the abuse), because this person has been spamming multiple Wikimedia sites at least since September 2017. A Global Rangeblock is necessary because this user has circumvented each of their previous (Global) IP blocks. Anonymous editors should be referred to ACC or to the Stewards for account creation if they want to edit on any of the projects (Collateral damage on the range is rather small anyway, given the sparse editing activity). LightandDark2000 (talk) 07:55, 3 April 2018 (UTC)

Yes check.svg Done together with numerous additional accounts (not all Black Magic though). @LightandDark2000: Cheers. —Green Giant (talk) 09:45, 3 April 2018 (UTC)

Global lock for Manda 1993[edit]

Status:    Done

Long-term abuse. --Ilzhabimantara (talk) 10:14, 3 April 2018 (UTC)

Yes check.svg Done by Green Giant --Alaa :)..! 11:01, 3 April 2018 (UTC)

Global lock for Leoonell Messi[edit]

Status:    Done

WP0 abusers. --jdx Re: 12:13, 3 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 12:29, 3 April 2018 (UTC)

Global lock for Emanuel da Silva Marquese[edit]

Status:    Done

WP0 abuser. --jdx Re: 12:30, 3 April 2018 (UTC)

Yes check.svg Done --Alaa :)..! 12:33, 3 April 2018 (UTC)

Global lock for spambots[edit]

Status:    Done

Spambots. Wiki13 talk 12:55, 3 April 2018 (UTC)

Yes check.svg Done together with more than sixty additional accounts revealed by checkuser. @Wiki13: Cheers. Green Giant (talk) 13:57, 3 April 2018 (UTC)

Global lock for Gibson Sky[edit]

Status:    Done

WP0 abuser. --jdx Re: 15:29, 3 April 2018 (UTC)

Yes check.svg Done together with three additional accounts. -Green Giant (talk) 15:48, 3 April 2018 (UTC)

Global lock for socks of Avoided (or an impostor)[edit]

Status:    Done

@Trijnstel: (or whom it may concern: Please lock his socks, check the underlying IPs and block IPs and as well additional accounts, if found. If blocked locally, but not locked globally, it will be probably end like this. Regards --Schniggendiller (talk) 17:00, 3 April 2018 (UTC)

Yes check.svg Done with several extra accounts locked and IPs blocked. @Schniggendiller: Cheers. —Green Giant (talk) 18:12, 3 April 2018 (UTC)

Global lock for Dini Pg2[edit]

Status:    Done

WP0 abuser. --jdx Re: 17:04, 3 April 2018 (UTC)

Yes check.svg Done with four extra accounts. -Green Giant (talk) 18:16, 3 April 2018 (UTC)

Global lock for Lama News[edit]

Status:    Done

WP0 abusers. --jdx Re: 20:54, 3 April 2018 (UTC)

Yes check.svg Done with a bonus account. —Green Giant (talk) 21:09, 3 April 2018 (UTC)

Global lock for LTA[edit]

Status:    Done

Long-term abuse. SA 13 Bro (talk) 23:22, 3 April 2018 (UTC)

Global unlock for JoeyPknowsalotaboutthat[edit]

Status:    Not done

User is very apologetic (see this) and persistently claims puppets were his friends who wanted to cause trouble (see this and this) unlike Joey himself, who wants to build an encyclopedia. It was his friends, not him, who wanted to abuse multiple accounts. User:Ilikechristians should remain locked for intentional cross-wiki abuse. --Daniel "Danny" Wilson (talk) 18:22, 24 March 2018 (UTC)

I would ask any reviewing Steward to review the CheckUser data and the behavior/claims of the accounts before considering unlocking any of the accounts. Cross-wiki abuse is evident, and something doesn't look right here. LightandDark2000 (talk) 04:56, 24 March 2018 (UTC)
@Ruslik0: --Alaa :)..! 14:07, 25 March 2018 (UTC)
This is a variant of en:Wikipedia:My little brother did it. Ruslik (talk) 19:33, 26 March 2018 (UTC)
@Ruslik0, don't just make assumptions based on the IP address. Maybe Joey's friends (not Joey himself) could be the ones abusing accounts! --Daniel "Danny" Wilson (talk) 03:16, 27 March 2018 (UTC)

┌─────────────────────────────────┘

  • The applicant is almost certainly a sock of JoeyP and has been locked. No confidence that this was s genuine appeal. Green Giant (talk) 18:43, 4 April 2018 (UTC)

Global lock for Wan Yasser Gianov[edit]

Status:    Done

New sock of Adam aflah which is globally locked. -ArdiPras95 (talk) 21:49, 26 March 2018 (UTC)

@ArdiPras95: how you determine the relationship between this account and Adam aflah? --Alaa :)..! 11:52, 30 March 2018 (UTC)
Yes check.svg Done. No idea if it is Adam (no CU data and no answer from ArduPras95) but checkuser revealed one extra account locked. Green Giant (talk) 19:25, 4 April 2018 (UTC)

Global lock for LTA ROXELANA22 sockfarm[edit]

I've included all of the known sockpuppets from ROXELANA22's earlier sockfarm: Macallla (this account was Globally Locked and Hidden in 2008); I've excluded the socks that were already Locked. In this personal attack on my Commons talk page, ROXELANA22 pretty much confesses that his oldest account is User:Anibal1, which should be Locked as well (as the sockmaster). Given the fact that ROXELANA22 was able to re-activate User:Antiantps43 (his 3rd-oldest sock account) after 6 years of inactivity, and also given the personal attack on my talk page that I've linked earlier, it's quite likely that ROXELANA22 remembers these accounts, and also their passwords. As stated in the previous reports for ROXELANA22 that I've issued recently, the severity and duration of this LTA's cross-wiki vandalism, along with his pattern of using very old sleepers or moving locally-blocked socks to continue cross-wiki vandalism, merits a Global Lock on all of his accounts. LightandDark2000 (talk) 10:22, 27 March 2018 (UTC)

Can someone please Lock these accounts? The discussion here provides more reasons for why this LTA's socks need to be Locked. He recently began re-using years-old sock accounts to resume cross-wiki vandalism (such as User:ZiguratEnki). By the way, it's worth noting that ROXELANA22 was Banned at the English Wikipedia years ago, and given his recent cross-wiki vandalism and trolling, he's probably de-facto Globally Banned as well. LightandDark2000 (talk) 23:28, 31 March 2018 (UTC)

Yes check.svg Done--Alaa :)..! 19:38, 4 April 2018 (UTC)

Global lock for 影武者(Nipponese Dog Calvero)[edit]

Status:    Done

--Lanwi1(talk) 05:05, 3 April 2018 (UTC)

Yes check.svg Done together with two more accounts, although the checkuser showed an additional six accounts credited to ISECHIKA or an imitator. @Lanwi1: Cheers. —Green Giant (talk) 10:58, 3 April 2018 (UTC)
@Green Giant:丁宜蘭's edit behavior conformity with Nipponese Dog Calvero. Nipponese Dog Calvero is using proxy IP? --Lanwi1(talk) 15:57, 3 April 2018 (UTC)
@Lanwi1: Yes, it is very possible that NDC is mimicking but I’ve blocked the underlying IP as a precaution. Green Giant (talk) 16:01, 3 April 2018 (UTC)
@Lanwi1: NDC has been using proxy IP's lately (unless someone else is really good at being his imposter). Can't think of this edit being made by anyone else. Also this is another proxy IP I reported at zhwiki. -★- PlyrStar93. Message me. 17:12, 3 April 2018 (UTC)

Global lock for socks of LTA Vandyrandy (3)[edit]

Status:    Done

More socks of the LTA cross-wiki vandal Vandyrandy. Cross-wiki abuse is obvious here. Vandyrandy is known for extremely degrading personal attacks and Neo-Nazi vandalism, in addition to cross-wiki vandalism. Similarly to his IPv6 range, his IPv4 range needs to be rangeblocked for at least 3-6 months, because this IP range also has an extensive history of abuse across multiple Wikimedia sites (including Meta), and also because this user is known to create sock account across multiple wiki sites. LightandDark2000 (talk) 05:12, 3 April 2018 (UTC)

After sifting through the range contributions, it appears that this IP range has been abused extensively since October 2017, concurrently with Vandyrandy's 2600:1000:B100:0:0:0:0:0/42 IPv6 range. By the way, given the history of abuse and mass socking, I strongly recommend Stewards to Check the IP range (and the listed accounts) for more Sleepers. LightandDark2000 (talk) 05:13, 3 April 2018 (UTC)
Yes check.svg Done together with several bonus accounts. I’ve not blocked the IP range because there appear to be many unrelated accounts. Cheers. Green Giant (talk) 10:40, 3 April 2018 (UTC)
@Green Giant: I was actually thinking of an "anon-only" Global Rangeblock (IPs only + account creation), so that the unrelated users can still log into their account and edit. Perhaps this can be done? LightandDark2000 (talk) 06:44, 4 April 2018 (UTC)
Actually, see the 4th report on this LTA, some reports below. LightandDark2000 (talk) 09:47, 4 April 2018 (UTC)

Global lock for 影武者 (Nipponese Dog Calvero)[edit]

Status:    Done

--Artix Kreiger (Message Wall) 22:30, 3 April 2018 (UTC)

Yes check.svg Done together with four bonus accounts and two IPs blocked. @Artix Kreiger: cheers. —Green Giant (talk) 00:00, 4 April 2018 (UTC)
Well, apparently Nipponese Dog Calvero has been abusing proxy IP's. Anyone would like to take a look if 简单时刻 acts behaviorally consistent with NDC at zhwiki? -★- PlyrStar93. Message me. 00:11, 4 April 2018 (UTC)
I saw Artix tagged 简单时刻 as a sock of 影武者 on zh.wp. But it looks like a sockpuppet of someone else (discuss about establishing Arbitration Committee since first edit). @Lanwi1: Could you confirm it? Thanks. --E8xE8 (talk) 00:25, 4 April 2018 (UTC)
@E8xE8:简单时刻 isn’t sock of NDC, because edit behavior inconformity. --Lanwi1(talk) 00:51, 4 April 2018 (UTC)
@Artix Kreiger: You have make the mistaken, User:简单时刻 is not a sockpuppet of NDC (影武者). @Green Giant: Please consider to do something on this user account, thanks. SA 13 Bro (talk) 00:57, 4 April 2018 (UTC)

I had requested a lock on Frankie Kao because Favonian blocked it. Then green giant used Checkuser. However, it is still suspicious because of reason provided by E8xE8 --Artix Kreiger (Message Wall) 00:59, 4 April 2018 (UTC)

The CU data would match probably because multiple unrelated people were using the same proxy IP around the same time. A lot of users at zhwiki rely on proxy/VPN due to obvious reasons. -★- PlyrStar93. Message me. 01:06, 4 April 2018 (UTC)

PlyrStar93, please enlighten me on my talk page. What are the obvious reasons? --Artix Kreiger (Message Wall) 01:08, 4 April 2018 (UTC)

A reason that 简单时刻 might not be a sockpuppet of 影武者 is, he used simplified Chinese but not traditional Chinese which was used by 影武者. Other than the topic (establishing ArbCOM), it seems that 简单时刻 has different philosophy ideas than 影武者 according to his/her comments. However, it is highly probable that 简单时刻 is someone else's unrevealing puppet since he knows Wikipedia so well. --PhiLiP (talk) 01:17, 4 April 2018 (UTC)
I will defer to Lanwi1 and PhiLiP's assessment and have unlocked the account. For clarity, it wasn’t Artix who requested the lock for that account. From the CU data, those three accounts (Frankie Kao, Eric McClintock, and 简单时刻) were the only ones on that IP, and it appeared they might be the same user. Green Giant (talk) 01:34, 4 April 2018 (UTC)

Global lock for Bos primigenius rex[edit]

Status:    Done

New sock puppet of Yahadzija. Эlcobbola talk 23:33, 3 April 2018 (UTC)

Yes check.svg Done with two bonus accounts and one IP blocked. @Elcobbola: cheers. —Green Giant (talk) 00:07, 4 April 2018 (UTC)

Global lock for Nipponese Dog Calvero[edit]

Status:    Done

Newly active sock account. -★- PlyrStar93. Message me. 00:44, 4 April 2018 (UTC)

Not surprised at the "chinaman" comment. --Artix Kreiger (Message Wall) 00:48, 4 April 2018 (UTC)

Yes check.svg DoneDefender (talk) 00:56, 4 April 2018 (UTC)

Global lock for Alvi Z. sock[edit]

Status:    Done

Long-term abuse. –theinstantmatrix (talk) 01:04, 4 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 01:38, 4 April 2018 (UTC)

Global lock for Nipponese Dog Calvero[edit]

Status:    Done

Newly active sock account. -★- PlyrStar93. Message me. 00:44, 4 April 2018 (UTC)

Not surprised at the "chinaman" comment. --Artix Kreiger (Message Wall) 00:48, 4 April 2018 (UTC)

Yes check.svg DoneDefender (talk) 00:56, 4 April 2018 (UTC)

Global lock for Nipponese Dog Calvero[edit]

Status:    Done

These ones indef'ed at enwiki earlier on. -★- PlyrStar93. Message me. 03:04, 4 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 03:36, 4 April 2018 (UTC)

Global lock for Black Magic spambot LTA (2)[edit]

Status:    Done

Obvious sockpuppet/spambot of the "Black Magic" spambot LTA. The account needs to be Locked. Given the very persistent history of cross-wiki spamming and socking (stretching back at least since September 2017), the underlying IP range(s) of the newest socks need to be Globally Rangeblocked as well. The current rangeblock should probably be expanded to a year-long Global Rangeblock on 117.119.0.0/16 (assuming that the newer IPs are on the same range), because this spammer has evaded their last, smaller rangeblock, and due to the duration of the abuse coming from the network. I noticed that a lot of IPs on this network have been reported to Blacklisting sites for spam/abuse, so these are more reasons to expand the Global Rangeblock. LightandDark2000 (talk) 07:45, 4 April 2018 (UTC)

Given the history of mass socking/spambot creation by the operator of the IPs, a Steward should check the entire IP range and the listed account for more Sleepers. Given the extent of the abuse and the multitude of IPs involved in the spamming, I suspect that the company behind the network may be responsible for the spambots, or at the very least, whoever is using that IP network. You can also see the extensive abuse in the last report for more reasons why the IPs need an expanded Global Rangeblock. The IP range can be an "anon-only" block to avoid blocking unrelated users, but the IPs should still be Globally Rangeblocked for at least a year to stop the cross-wiki abuse. LightandDark2000 (talk) 07:50, 4 April 2018 (UTC)
Yes check.svg Done + some sleepers. Range blocked (anon. only) 1 week initially - TNT 08:04, 4 April 2018 (UTC)
@There'sNoTime and Green Giant: You don't have to do anything more right now, but FYI, the abuse from this IP range was much more extensive than I had imagined (especially given the numerous local re-blocks). LightandDark2000 (talk) 08:15, 4 April 2018 (UTC)

Global lock for Black Magic spambot LTA sockmaster[edit]

Status:    Done

The first named account is probably the sockmaster (or a sock account) of the "Black Magic specialist" spammer LTA, due the the username pattern. Pretty much every other account I know of with "Black Magic specialist" in its name is a sock/spam account of this LTA. In any case, this account still needs to be Globally Locked, because the username alone already implies that the user is not here to contribute positively, and because the username is a violation of Wikimedia's policies on advertising / spam accounts. As for the second account, it's an obvious sock. LightandDark2000 (talk) 08:39, 4 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 10:01, 4 April 2018 (UTC)

Global lock for socks of LTA Vandyrandy (4)[edit]

Status:    Done

Obvious socks of the cross-wiki LTA Vandyrandy. This LTA is known for Neo-Nazi vandalism, and severe personal attacks across various wiki sites. Given the recent socking activity of this sockmaster, I strongly suggest a Sleeper Check. The listed IP range should also be Globally Rangeblocked for 3+ months, as an "anon-only" rangeblock to allow unrelated users to log in and continue editing. The rangeblocks need to be multi-month blocks, given the abuse shown in the report here, and another one below it (3). Any other IP ranges involved (if any) should also receive a 3-6+ month-long Global Rangeblock set at "anon-only." LightandDark2000 (talk) 08:53, 4 April 2018 (UTC)

Yes check.svg Done with one definite sleeper. IP anon-blocked for 3 months. -Green Giant (talk) 10:16, 4 April 2018 (UTC)

Global lock for User:Qwrgq[edit]

Status:    Done

Obvious vandalism-only account. This user was also recently active at other Wikimedia sites, so a Global Lock is needed here. LightandDark2000 (talk) 09:44, 4 April 2018 (UTC)

There is a lot more vandalism visible in this user's Edit Filter Log. LightandDark2000 (talk) 12:48, 4 April 2018 (UTC)
Yes check.svg Done but no extra accounts found. Green Giant (talk) 14:14, 4 April 2018 (UTC)

Global lock for LTA Black magic specialist spammer (4)[edit]

Status:    Done

Found even more socks of the cross-wiki LTA "Black magic specialist", after digging around in Wikipedia's Account Creation Logs. These accounts need to be Globally Locked, and the recent ones (within the past year) need to be Checked for Sleepers. For the "sockfarms" listed that mostly don't have any edits, the naming pattern pretty much gives it away. The few accounts in those sockchains that did have edits (whether or not they were blocked) all appeared to be adding "black magic" spam, or creating pages with related content. From what I can tell, this spammer has been spamming and socking since 2011 (ad possibly as early as 2009). LightandDark2000 (talk) 10:25, 4 April 2018 (UTC)

The last named account is unrelated, but needs to be Locked because of the offensive/obscene username. LightandDark2000 (talk) 10:25, 4 April 2018 (UTC)
Yes check.svg Done with three already locked. Checkuser has not revealed any additional accounts. —Green Giant (talk) 11:27, 4 April 2018 (UTC)

Global lock for Count Commons Pg[edit]

Status:    Done

WP0 abuser. --jdx Re: 10:57, 4 April 2018 (UTC)

Yes check.svg Done - TNT 11:27, 4 April 2018 (UTC)

Global lock for User:Measuredmile95[edit]

Status:    Done

Sock of a certain LTA user. I don't know exactly who the actual sockmaster is, though. Long-term abuse is evident, and personal attacks are also obvious in this account's contributions. A Sleeper Check should be run on this sock, and any other related accounts should also be Locked, along with the sockmaster account (if the Stewards know who the actual sockmaster is). LightandDark2000 (talk) 11:48, 4 April 2018 (UTC)

Yes check.svg Done — no other accounts found. I cannot see any mention of who this might be (searched here, stew-wiki and check-wiki), but I've asked the blocking admin on ENWP. Green Giant (talk) 12:33, 4 April 2018 (UTC)

Global lock for socks of INeverCry[edit]

Status:    Done

Socks of the Globally-banned User:INeverCry. These socks haven't been Locked yet. LightandDark2000 (talk) 12:13, 4 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 12:36, 4 April 2018 (UTC)

Global lock for Nipponese Dog Calvero[edit]

Status:    Done

Newly active sock account. -★- PlyrStar93. Message me. 00:44, 4 April 2018 (UTC)

Not surprised at the "chinaman" comment. --Artix Kreiger (Message Wall) 00:48, 4 April 2018 (UTC)

Yes check.svg DoneDefender (talk) 00:56, 4 April 2018 (UTC)

Global lock for Alvi Z. sock[edit]

Status:    Done

Long-term abuse. –theinstantmatrix (talk) 01:04, 4 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 01:38, 4 April 2018 (UTC)

Global lock for Nipponese Dog Calvero[edit]

Status:    Done

These ones indef'ed at enwiki earlier on. -★- PlyrStar93. Message me. 03:04, 4 April 2018 (UTC)

Yes check.svg DoneGreen Giant (talk) 03:36, 4 April 2018 (UTC)

Global lock for Black Magic spambot LTA (2)[edit]

Status:    Done

Obvious sockpuppet/spambot of the "Black Magic" spambot LTA. The account needs to be Locked. Given the very persistent history of cross-wiki spamming and socking (stretching back at least since September 2017), the underlying IP range(s) of the newest socks need to be Globally Rangeblocked as well. The current rangeblock should probably be expanded to a year-long Global Rangeblock on 117.119.0.0/16 (assuming that the newer IPs are on the same range), because this spammer has evaded their last, smaller rangeblock, and due to the duration of the abuse coming from the network. I noticed that a lot of IPs on this network have been reported to Blacklisting sites for spam/abuse, so these are more reasons to expand the Global Rangeblock. LightandDark2000 (talk) 07:45, 4 April 2018 (UTC)

Given the history of mass socking/spambot creation by the operator of the IPs, a Steward should check the entire IP range and the listed account for more Sleepers. Given the extent of the abuse and the multitude of IPs involved in the spamming, I suspect that the company behind the network may be responsible for the spambots, or at the very least, whoever is using that IP network. You can also see the extensive abuse in the last report for more reasons why the IPs need an expanded Global Rangeblock. The IP range can be an "anon-only" block to avoid blocking unrelated users, but the IPs should still be Globally Rangeblocked for at least a year to stop the cross-wiki abuse. LightandDark2000 (talk) 07:50, 4 April 2018 (UTC)
Yes check.svg Done + some sleepers. Range blocked (anon. only) 1 week initially - TNT 08:04, 4 April 2018 (UTC)
@There'sNoTime and Gre