Steward requests/Global/2018-05

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search
Warning! Please do not post any new comments on this page. This is a discussion archive first created on 01 May 2018, although the comments contained were likely posted before and after this date. See current discussion.

Contents

Requests for global (un)block

Global block for 2606:A000:6604:D700:CCA7:80C:ADF4:2D50

Status:    Done

Xwiki vandalism.   — Jeff G. ツ 03:28, 1 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 17:26, 1 May 2018 (UTC)

Make that 2606:A000:6604:D700::/64 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker.   — Jeff G. ツ 17:27, 1 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 19:18, 1 May 2018 (UTC)

Global block for 1.22.129.134

Status:    Done

Xwiki spam: Call girl service, see SBL log. I blocked them on Commons. --Achim (talk) 20:41, 30 April 2018 (UTC)

Edit: Continues now as

--Achim (talk) 06:46, 1 May 2018 (UTC)

Yes check.svg Done, Linedwell [talk] 18:09, 3 May 2018 (UTC)

Global block for User:Prüm

Status:    Not done

Reincarnation of User:Grawp. --Prüm (talk) 11:32, 3 May 2018 (UTC)

Someone? --Prüm (talk) 21:35, 3 May 2018 (UTC)

@Stewards: Please consider this thread on en.wp and this thread on de.wp. It seems likely that Prüm's account has been hacked. --BlakkAxe (talk) 23:03, 3 May 2018 (UTC)

No it hasn't. I cannot undo what has happened. I apologize. --Prüm (talk) 00:00, 4 May 2018 (UTC)
I withdraw the motion. Sorry for troubling you. --Prüm (talk) 04:10, 4 May 2018 (UTC)
X mark.svg Not done as above --Alaa :)..! 09:22, 4 May 2018 (UTC)

Global block for 108.177.6.0/24, 108.177.7.0/24 and 108.177.28.0/24

Status:    Done

Hello. In March 2018, I have created the request Vandalism reports/Archives/2018-03#70.32.138.0/24, so MarcoAurelio has globally blocked 70.32.138.0/24 for cross-wiki vandalism. Now, it seems that the same user is using 108.177.6.0/24, 108.177.7.0/24 and 108.177.28.0/24, to do the same vandalism (adding the word "text" everywhere). Regards --NicoScribe (talk) 22:56, 3 May 2018 (UTC)

Done for 1 month. Stryn (talk) 14:54, 4 May 2018 (UTC)

Global block for User:Auwal3

Status:    Done

This is the new account of globally locked abuser Auwall (talk · contribs). –Ammarpad (talk) 17:07, 4 May 2018 (UTC)

Blocked by Alaa. SA 13 Bro (talk) 22:45, 4 May 2018 (UTC)

Global block for 185.46.76.11

Status:    Done

Cross-wiki vandalism. --Guycn2 · 20:59, 5 May 2018 (UTC)

Done by Tegel. Matiia (talk) 16:17, 6 May 2018 (UTC)

Global block for 173.91.40.194

Status:    Done

Cross-wiki vandalism. Esteban16 (talk) 22:08, 5 May 2018 (UTC)

Done. Matiia (talk) 16:16, 6 May 2018 (UTC)

Global block for 181.167.114.162

Status:    Not done

Cross-wiki vandalism.   — Jeff G. ツ 15:23, 6 May 2018 (UTC)

It has stopped. Matiia (talk) 16:13, 6 May 2018 (UTC)

Global block for 67.100.127.231

Status:    Done

Cross-wiki vandalism.   — Jeff G. ツ 14:54, 5 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 15:58, 7 May 2018 (UTC)

Global block 2600:8800:3000:0:0:0:0:0/36

Status:    Not done

Block evasion by globally locked user MisterAnthony. He has been occasionally active on Interlingua wikipedia as various IPs since the locking of his named account:

with a sudden recent flurry of activity:

His signature on iawiki is the creation of micro-stub articles for U.S. actors, each containing one sentence in Interlingua and another in Spanish, partly redundant with the first (ia:Special:Diff/592001). The wikidata item histories indicate he creates similar fill-in-the-blanks micro-stubs for the same actor in dozens of other small languages, together with messing around with wikidata itself.

I havve blocked the /36 on iawiki for 6 months and don't expect collateral problems, based on the size of iawiki and observation of the contributions in the range. There have been previous global blocks within the range:

The 3081 range above is probably stale. The 3080 and 3982 have received blocks as just mentioned. The 3981 is new. If /36 is excessive for a global block, may I suggest:

(Incidentally, a new named account has just appeared: AnthonyAW. Even with only 4 edits, it looks like a sock of this user. Will bear watching.)

--Tortoise0308 (talk) 19:25, 11 January 2018 (UTC)

X mark.svg Not done - very stale request. – Ajraddatz (talk) 05:22, 8 May 2018 (UTC)

Global block for the boy band vvandal

Status:    Done

Cross-wiki vandal (see also en:Wikipedia:Long-term_abuse/Boy_band_vandal) active for more than 10 days. --Horcrux92 (talk) 08:36, 31 January 2018 (UTC)

Could somebody please action this? Also 2001:56a:f580::/41 would need to be blocked, per the last requests linked from the abuse report. Graham87 (talk) 07:16, 27 February 2018 (UTC)
Also, account creation should be allowed, due to collateral damage. I've just found out that the strongest block will apply for IP addresses which have been both locally and globally blocked, so if account creation were disabled in the global block, that would undo the account-creation-enabling effect of the local one. Graham87 (talk) 16:15, 1 March 2018 (UTC)
Graham87, that is not possible: "Global blocks should, wherever practicable and sensible, be placed with the anonymous only flag on. Remember that even in this case account creation from the blocked address(es) is prevented." @ Global blocks. Emphasis mine. — regards, Revi 10:39, 24 March 2018 (UTC)
@Revi: Ah OK; thanks for letting me know. I'd only heard one report of collateral damage in a year, so ... meh. Graham87 (talk) 13:31, 24 March 2018 (UTC)
Also add 2001:56a:f104:b300::/64 and 75.159.116.143 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker to the list. Graham87 (talk) 19:00, 1 April 2018 (UTC)
Ditto with 199.126.52.20 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker. Graham87 (talk) 11:39, 5 April 2018 (UTC)
Also 108.181.232.115 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker Graham87 (talk) 09:52, 4 May 2018 (UTC)
Yes check.svg Done most recent one. – Ajraddatz (talk) 05:24, 8 May 2018 (UTC)

Global block for 95.26.0.0/16

Status:    Not done

Hello. This user is:

  1. repeatedly adding false information
  2. been blocked several times for vandalism on en.wp, and globally blocked (95.26.18.111) for long-term abuse
  3. abusing many projects since (at least) mid-June 2017, cf. the list above
  4. ignoring the comments from other contributors, cf. my last attempt of discussion, one of my other attempts of discussion, en:User talk:95.26.222.66, en:User talk:95.26.140.56, etc.
  5. the unique user of 95.26.0.0/16 since mid-June 2017 (except for a few edits that might be from someone else: 6 edits on commons, 109 (out of 245) on en.wp, 2 on fr.wp, 1 on fr.wiktionary, 6 on it.wp, etc.)
  6. sometimes (but more often in the past) using 95.25.0.0/16 and 176.59.0.0/16.

Regards --NicoScribe (talk) 17:15, 20 April 2018 (UTC)

@NicoScribe: did anybody try to complain to the ISP? There are many legitimate users in this /16 range. It is not a hosting making its business exactly for housing trolls and other scum. Incnis Mrsi (talk) 19:31, 20 April 2018 (UTC)
@Incnis Mrsi: thank you for your comments. I am sorry, I have made a mistake in my item 5: the Russian Wikipedia is the unique project with many legitimate contributions in this /16 range. So a local unblocking should be applied on the Russian Wikipedia.
I have not made a complaint to the ISP. But this user is just a cross-wiki long-term abuser, and there are many cross-wiki long-term abusers, and most of the time their cases are managed with blocks or filters. If this case is managed by a complaint to the ISP, I would be surprised (but I rarely report cases of cross-wiki long-term abusers, and of course I don't have the experience of a steward). --NicoScribe (talk) 06:18, 21 April 2018 (UTC)
Since my first message, the vandal has used:
--NicoScribe (talk) 10:08, 1 May 2018 (UTC)
... and:
--NicoScribe (talk) 15:59, 3 May 2018 (UTC)
X mark.svg Not done - too much collateral. – Ajraddatz (talk) 05:24, 8 May 2018 (UTC)
Hello @Ajraddatz: thank you for your answer even if, of course, I am sad about this conclusion. With a local unblocking on the Russian Wikipedia, I see very little collateral damage of a global block, as I have explained before. The IP are all over the /16 IP range, so narrower range blocks seem impossible. So what is the solution? Block the vandal one IP at a time? --NicoScribe (talk) 07:49, 8 May 2018 (UTC)

Global block for 2604:9E01:1:100::/64

Status:    Not done

In use (see ru:Special:Contribs/2604:9E01:1:100:0:0:3:4) by a copyvioman and vicious puppeteer #Global lock for 8 socks of Ven0m2014. Incnis Mrsi (talk) 08:30, 23 April 2018 (UTC)

X mark.svg Not done - stale now. – Ajraddatz (talk) 05:26, 8 May 2018 (UTC)

Global block for 185.220.207.224

Status:    Not done

In use (see ru:Special:Contribs/185.220.207.224) by a copyvioman and vicious puppeteer #Global lock for 8 socks of Ven0m2014. Blocked in en.Wikipedia. Incnis Mrsi (talk) 09:08, 23 April 2018 (UTC)

X mark.svg Not done - stale now. – Ajraddatz (talk) 05:25, 8 May 2018 (UTC)

Global block for 2A03:E581:4:FC::/64

Status:    Not done

In use (see ru:Special:Contribs/2A03:E581:4:FC::/64) by a copyvioman and vicious puppeteer #Global lock for 8 socks of Ven0m2014. Incnis Mrsi (talk) 08:58, 23 April 2018 (UTC)

X mark.svg Not done - stale now. – Ajraddatz (talk) 05:26, 8 May 2018 (UTC)

Global block for 185.236.200.26

Status:    Not done

IP on a hosting with poor reputation blocked in en.Wikipedia since April 10. In use (see ru:Special:Contribs/185.236.200.26) by a copyvioman and vicious puppeteer #Global lock for 8 socks of Ven0m2014. Incnis Mrsi (talk) 09:37, 23 April 2018 (UTC)

X mark.svg Not done - stale now. – Ajraddatz (talk) 05:26, 8 May 2018 (UTC)

Global block for 2A0D:5600:3:8::/64

Status:    Not done

Used by a vicious puppeteer #Global lock for 8 socks of Ven0m2014 to promulgate copyvio – see ru:Special:Contribs/2A0D:5600:3:8::/64, fr:Special:Contribs/2A0D:5600:3:8::/64, and possibly others. Incnis Mrsi (talk) 11:45, 23 April 2018 (UTC)

X mark.svg Not done - stale now. – Ajraddatz (talk) 05:26, 8 May 2018 (UTC)

Global block for 185.216.34.0/24

Status:    Not done

A troll house whose population includes Ven0m2014 (see above), but is not limited to him. Blocked in en. and ru.wikipedias, also some vandalism on Meta in January (deterred by point blocks). Incnis Mrsi (talk) 15:59, 23 April 2018 (UTC)

X mark.svg Not done - stale now. – Ajraddatz (talk) 05:26, 8 May 2018 (UTC)

Spambot webhosts, part 2

Status:    Not done

IPVanish VPN. MER-C (talk) 15:45, 28 April 2018 (UTC)

StrongVPN. MER-C (talk) 18:47, 3 May 2018 (UTC)

A couple more webhosts. MER-C (talk) 15:51, 7 May 2018 (UTC)

Not seeing any abuse on the couple of these that I checked. Please give more information with these requests - where have they been abused, which accounts, what subranges, etc. – Ajraddatz (talk) 05:28, 8 May 2018 (UTC)
All en.wp, all for very recent spam. MER-C (talk) 19:07, 8 May 2018 (UTC)

Global block for 212.83.160.0/19

Status:    Not done

VPN by Free SAS / ProXad [3] --Well-Informed Optimist (talk) 20:11, 28 April 2018 (UTC)

@Well-Informed Optimist: wouldn’t blocking 213 IPs for one vandal an overkill? Incnis Mrsi (talk) 12:28, 30 April 2018 (UTC)
Well-Informed Optimist, I looked into Internet, Free SAS is not open proxy. Marshmallych 19:11, 30 April 2018 (UTC)

@Marshmallych: he did not claim it is an open proxy, read the rationale indeed. Also, learn proper use of indentation—:—in wiki threads. Incnis Mrsi (talk) 19:19, 30 April 2018 (UTC)

Incnis Mrsi, that's open proxy really. Marshmallych 19:23, 30 April 2018 (UTC)
Risible. It is about low qualification of this sysop and overall chaos in fr.Wikipedia, as well. Not really about a huge open proxy occupying 8190 different IPs. Incnis Mrsi (talk) 19:34, 30 April 2018 (UTC)
Locked a few other accounts on the range, but have not blocked it due to collateral damage. Abusefilters are successfully stopping most of the abuse from this one. – Ajraddatz (talk) 05:29, 8 May 2018 (UTC)

Global block for IP socks of De la lombertie

Status:    Not done

Current IP

Cross-wiki LTA sock-master De la lombertie (see global lock request now archived here), all "ducks" with continued Sanfourche obsession. Request one month global block for current IP (88.140.36.169), already blocked on French Wikipedia, requested on English Wikipedia and now expired (36 hrs) on Italian Wikipedia. Note that the historic IP addresses have been included to assist in future clean-up efforts of his edits on other Wikis. --Loopy30 (talk) 21:32, 29 April 2018 (UTC) and amended Loopy30 (talk) 20:13, 30 April 2018 (UTC)

I edited your report title. Remember to list only the option that you want. By the way, it looks like some Global Rangeblocks could be useful here. LightandDark2000 (talk) 21:44, 29 April 2018 (UTC)
Thanks. I don't know how a global range-block would interfere with other legitimate IP editors within the range. He usually has only one IP address at a time, and then for only 1-50 days before it switches, never to be used again. What a global block will accomplish however, is to stop his normal practice of switching to another language wiki when blocked on English or French Wikipedia. Loopy30 (talk) 22:06, 29 April 2018 (UTC)
X mark.svg Not done - now stale. – Ajraddatz (talk) 05:31, 8 May 2018 (UTC)

Global block for 98.183.128.0/17 and unblock for 98.183.0.0/16

Status:    Not done

@Ruslik0: the whois information (from ARIN) and observations on IP edits make clear that Tamara787-infested range is a /17, not /16. Edits from 98.183.0.0/17 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker, such as [4][5], are indeed mostly good. Unblock the /16 and block the /17, and please, be more careful in issuing broad-range global blocks next time, even anon-only. Incnis Mrsi (talk) 16:53, 30 April 2018 (UTC)

The whois information doesn't say this at all: it must be read more carefully. For a series of obscure administrative reasons a big chunk of former B classes was given to COX in different times, so, in short, assignment is the same from the whole 98.160.0.0/9, though different parts shows the signs of a fairly "diverse" internal subnetting. However at least 98.180.0.0/14 seems to have the same BGP announcements: so, in such circumstances is not possible to reply upon whois. Only data collected by checkusers can be useful. I know nothing about this specific LTA but it's important to know which source of information we should rely upon. --Vituzzu (talk) 20:15, 30 April 2018 (UTC)
I think that this rant here by Tamara787 is enough to tell that the current Global Rangeblock is quite effective. I would not recommend downsizing this block unless CheckUser evidence proves that the abuse is limited to the smaller range. LightandDark2000 (talk) 00:43, 3 May 2018 (UTC)
The /16 range is not very active: only about 20 newly registered accounts in the last three months and ~90% of them belong to Tamara787. So, it does not make sense to split the block into the narrower ranges. Ruslik (talk) 18:49, 3 May 2018 (UTC)
Not done, agreed with Ruslik. – Ajraddatz (talk) 05:32, 8 May 2018 (UTC)

Global block for 212.219.0.0/16

Status:    Not done

Xwiki vandalism.   — Jeff G. ツ 10:45, 3 May 2018 (UTC)

X mark.svg Not done - way too much collateral. There is some abuse on this range, but it's spread out far enough that it's better to deal with by individual account blocks/locks than sweeping global rangeblocks. – Ajraddatz (talk) 05:34, 8 May 2018 (UTC)

Global block for 96.31.195.0/20

Status:    Done

Hello. Since 12 April 2018 this user is doing cross-wiki vandalism, with repeating characters or blanking, in the IP range 96.31.195.0/20. The user has already been blocked locally (at least twice: [6], [7]) and globally (at least twice: [8] by Tegel, [9] by Stryn). Regards --NicoScribe (talk) 09:46, 5 May 2018 (UTC)

Yes check.svg Done. -- Tegel (Talk) 11:57, 7 May 2018 (UTC)
Thank you @Tegel: I have one remark: I think that this case is one part of the bigger case #Global lock for Topmaniac because I have noticed that the vandalisms by 96.31.192.0/20, by 209.239.96.0/20, by 216.49.96.0/19 and by the accounts are identical and that the IP provider is always Perry-Spencer Communications, Inc. Regards --NicoScribe (talk) 22:02, 8 May 2018 (UTC)

Global block for 60.242.196.159

Status:    Done

Cross-wiki vandalism.   — Jeff G. ツ 14:26, 5 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 18:17, 10 May 2018 (UTC)

Global block for 198.71.93.119

Status:    Done

XWiki spamming, see SBL log and StalkToy. Socks

should be treated the same way. --Achim (talk) 19:32, 7 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 11:56, 11 May 2018 (UTC)

Global block for 158.129.203.224

Status:    Done

Per this link - Open proxy --EVinente (talk) 19:52, 11 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 12:54, 12 May 2018 (UTC)

Global block for 2a02:120b:2c00:bfe0::/64

Status:    Done

Cross-wiki trolling. After having been blocked by me at de:wp he (reincarnation of User:Edgar von Webern) is trolling at en:wp (already blocked) and als:wp. NNW (talk) 10:09, 11 May 2018 (UTC)

Hello? Anybody? This user is insulting users and vandalizing articles and templates in multiple projects. NNW (talk) 19:46, 11 May 2018 (UTC)

Just in case that someone someday will be interested: the user with this IP is/was trolling in de:wp, en:wp, fr:wp, als:wp, bar:wp, cs:wp and nl:wp. NNW (talk) 16:00, 13 May 2018 (UTC)

@Tegel: 77.58.213.169 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker and 2a02:120b:2c00:bfe0::/64 are the same user. NNW (talk) 16:50, 14 May 2018 (UTC)
Yes check.svg Done. -- Tegel (Talk) 16:56, 14 May 2018 (UTC)

Global block for Special:Contributions/95.187.147.116

Status:    Done

Cross-wiki date vandalism. NinjaRobotPirate (talk) 04:18, 14 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 07:26, 14 May 2018 (UTC)

Requests for global block IP

Status:    Done

IP performing vandalism in various wikis. --Editor D.S (talk) 03:48, 19 May 2018 (UTC)

Done. Matiia (talk) 04:06, 19 May 2018 (UTC)

Global block for 207.10.104.58

Status:    Done

Cross-wiki abuse from an open proxy blocked on enwiki and commonswiki per a complaint on Ponyo's talk page (permalink). theinstantmatrix (talk) 21:08, 20 May 2018 (UTC)

Yes check.svg Done by Green Giant, anonymous only. theinstantmatrix (talk) 21:42, 20 May 2018 (UTC)

Global block for 185.253.97.0/24

Status:    Done

One of open proxies, used by Liza Veniza LTA. Marshmallych 19:46, 17 May 2018 (UTC)

Yes check.svg Done by Stryn yesterday, 24 hours ago. Incnis Mrsi (talk) 18:18, 21 May 2018 (UTC)

Global block for Special:Contributions/176.47.77.115

Status:    Done

Cross-wiki date vandalism. NinjaRobotPirate (talk) 03:57, 18 May 2018 (UTC)

Yes check.svg Done by Alaa. Incnis Mrsi (talk) 18:20, 21 May 2018 (UTC)

Global anonymous block for 124.104.230.109

Status:    Done

Long-term abuse: My Royal Young. SA 13 Bro (talk) 01:33, 22 May 2018 (UTC)

Yes check.svg Done — regards, Revi 09:43, 22 May 2018 (UTC)

Global block for IPs of LTA Willy on Wheels/Fuerdai***

Status:    Not done

IP range abused by LTA User:Willy on Wheels/Fuerdai*** LTA for vandalism just today. The WoW/Fuerdai LTA is known for many years of cross-wiki vandalism, personal attacks, and socking. This IP range could be a proxy or VPN network. This range also has an extensive history of vandalism stretching back several months. Please Globally Block the range for at least 3-6 months, and also check the range for more sleeper accounts. LightandDark2000 (talk) 00:52, 5 May 2018 (UTC)

Comment Comment Has nothing do to with the authentic Willy from 2004–05 whose account is linked. See here for discussion on this regrettable misconception. Incnis Mrsi (talk) 09:16, 12 May 2018 (UTC)

X mark.svg Not done. Vandalism from this IP range seems to have seized, and no evidence that this is an open proxy. Trijnsteltalk 17:38, 24 May 2018 (UTC)

Global block for 2600:6C4E:7003:600::/64

Status:    Not done

Cross-wiki trolling; probably by this globally banned person. Stewards or Commons check-users can also look at Thomas Aoibhneas (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser) and search for similar instances. Incnis Mrsi (talk) 03:15, 11 May 2018 (UTC)

Not done. Nothing to do here. Matiia (talk) 01:53, 24 May 2018 (UTC)

Downgrade global block for 197.241.128.0/17 to anon-only

Status:    Done

Infested with spammers, but definitely some legitimate GSM customers exist in Angola too. @Vituzzu: with all due respect, there are 215 IPv4 addresses. Imagine what this quantity is for a poor African country. Accounts of spammers can be hunted down alongside other kinds of abusers. Incnis Mrsi (talk) 09:16, 12 May 2018 (UTC)

Done. Large amount of abuse from it, but anon-only will prevent new accounts from being made. – Ajraddatz (talk) 17:18, 24 May 2018 (UTC)

Global block for 2600:6C64:617F:F8EB:0:0:0:0/64

Status:    Done

Please upgrade this to a hardblock. It has been used by an enwiki sockmaster to compromise at least two accounts and I am concerned that they may go crosswiki. There is no collateral damage possible from a hard block here. —DoRD talk 12:26, 12 May 2018 (UTC)

Comment Comment My guess is that one of the accs is Dollars (talk contribs deleted contribs logs block user block log CentralAuth AllContribs checkuser). I was very astonished looking on its SUL information. Incnis Mrsi (talk) 20:36, 12 May 2018 (UTC)
Dollars is not related to this range - they're on a different continent. —DoRD talk 20:51, 12 May 2018 (UTC)
Done. Matiia (talk) 01:57, 24 May 2018 (UTC)

Global block for 42.62.202.197

Status:    Done

I already reported it and it was blocked for 1 month (diff). The month has passed and now it's back doing its usual stuff. Additionally, this is one of its sockpuppets: 153.107.193.213 xwiki-contribs xwiki-date ST IP info WHOIS robtexgblockglistabuselogipchecker --Titore (talk) 12:02, 14 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 16:03, 24 May 2018 (UTC)

Global block for 122.148.193.128

Status:    Done

Cross-wiki vandalism. Esteban16 (talk) 22:57, 14 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 16:02, 24 May 2018 (UTC)

Global block for Open Proxy: 220.156.184.0/21

Status:    Not done

Open proxy network abused by an LTA vandal very recently. The vandal claims to be Wikinger, but behavioral evidence also suggests that this is an attempted impersonation by Cruizir. Please Rangeblock this proxy network for at least 1 year, and also check the range for sleepers. Thanks. LightandDark2000 (talk) 02:13, 19 May 2018 (UTC)

No collateral damage, but last abuse was four days ago. Can be blocked as needed to prevent active abuse. – Ajraddatz (talk) 17:20, 24 May 2018 (UTC)

Global block for 2001:B400:E200::/40

Status:    Not done

Anon-only block for a /40 please, infested with the Nipponese Dog Calvero a.k.a. 影武者. The point IPv6 addresses IMHO may be safely hard-blocked for a year although I’m unsure it would have any merit. Incnis Mrsi 08:39, 21 May 2018 (UTC)

X mark.svg Not done - too much collateral for a global block of that range. – Ajraddatz (talk) 17:21, 24 May 2018 (UTC)

Global block for 95.187.210.30

Status:    Done

Cross-wiki date vandalism. NinjaRobotPirate (talk) 23:24, 22 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 13:07, 24 May 2018 (UTC)

Global block for 77.58.213.169

Status:    Done

Back again with cross-wiki trolling, was blocked in April and May, reincarnation of User:Edgar von Webern. Should have a long-time block. NNW (talk) 19:08, 23 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 13:03, 24 May 2018 (UTC)

Global block for 2001:67C:2660:425:92E2:BAFF:FE91:1CB8

Status:    Done

Cross-wiki harassment, after blocking in Russian Wiktionary continued trolling in Russian Wikiquote. Marshmallych 17:39, 26 May 2018 (UTC)

Please, hurry, because vandal continues trolling in Forum in Russian Wikiquote. Marshmallych 17:49, 26 May 2018 (UTC)
And talk page. Oleg3280 (talk) 17:51, 26 May 2018 (UTC)
Vandalism. Oleg3280 (talk) 17:58, 26 May 2018 (UTC)
+this IP is open proxy. Marshmallych 18:05, 26 May 2018 (UTC)
Done by Rxy. Matiia (talk) 18:44, 26 May 2018 (UTC)

Global unblock for 5.150.225.115

Status:    Done

Seems like significant chunks of IP addresses with one of Sweden's major ISPs were swept along with this block. It needs to be narrowed down, I think. Would love to have my own IP unblocked for starters. Details:

You are currently unable to edit Wikipedia.
Editing from your IP address range (5.150.192.0/18) has been blocked (disabled) on all Wikimedia wikis until 20:11, 12 May 2023 by Vituzzu (meta.wikimedia.org) for the following reason:
hosting service with open proxies such as 5.150.254.143
This block began on 20:11, 12 May 2018
You can contact Vituzzu to discuss the block and you may make unblock requests or file appeals at meta:Steward requests/Global. Your current IP address is 5.150.225.115. Please include all above details in any queries you make.

Thanks for having another look! – Alimony (talk) 00:07, 25 May 2018 (UTC)

Please remember to select only one option while filing these reports, otherwise it can get really confusing. LightandDark2000 (talk) 02:12, 26 May 2018 (UTC)
By the way, you can request Global Block exemption if you are being affected by this block. LightandDark2000 (talk) 02:13, 26 May 2018 (UTC)
Not sure what you mean regarding options, did I do something wrong in the request? I tried following the instructions but I'm not very familiar with wikimedia internal processes and such so it is a bit confusing. Thanks for commenting though, and let me know if I should change anything in the request. I just want to be able to contribute to Wikipedia again :) — Alimony (talk) 23:43, 26 May 2018 (UTC)
Yes check.svg Done but please see above, it needs further investigation. --Vituzzu (talk) 14:38, 29 May 2018 (UTC)

Global block/unblock for 80.110.37.194

Status:    Not done

Static IP used by globally locked user Meister und Margarita (talk • contribs • block • xwiki-contribs • xwiki-date • CA • ST • lwcheckuser) (locked by Green Giant) and his socks. Recently used on itWP in conjunction with Meister und Margarita. IP address has been confirmed by CU on deWP: de:Wikipedia:Checkuser/Anfragen/Meister und Margarita, Lagerarbeiter, 80.110.37.194. --CorrectHorseBatteryStaple (talk) 23:25, 27 May 2018 (UTC)

Account is now unlocked, please re-apply for this block if new sockpuppets are registered. --Vituzzu (talk) 14:39, 29 May 2018 (UTC)

Global unblock for 5.150.226.35

Status:    Done

I'm not quite sure why I'm hit by this global block, but I hope it can be removed, so that I can keep editing as a legitimate contributor. The details of the block are:

The block was made by Vituzzu (meta.wikimedia.org). The reason given is hosting service with open proxies such as 5.150.254.143. Start of block:
12 maj 2018 kl. 22.11
Expiration of block: 12 maj 2023 kl. 22.11
Your current IP address is 5.150.226.35, and the blocked range is 5.150.192.0/18. --Salsero (talk) 08:23, 17 May 2018 (UTC)
I can see from Vituzzu's talk page that Skogsfrun (IP 5.150.204.79) has been hit by this block as well. /Salsero (talk) 13:47, 22 May 2018 (UTC)
@Salsero: are you using a VPS or a VPN? --Vituzzu (talk) 14:35, 29 May 2018 (UTC)
Hi, no, I'm not. Someone else mentioned somewhere that these are simply the IP:s of Bahnhof, one of our large Internet providers in Sweden. /Salsero (talk) 20:59, 30 May 2018 (UTC)
@Salsero: then Bahnhof does a mess, I had already unblocked your network on yesterday. --Vituzzu (talk) 21:01, 30 May 2018 (UTC)

Requests for global (un)lock and (un)hiding

Global lock for socks of Avoided (or an impostor)

Status:    Done

Please lock his socks, check the underlying IPs and block IPs and (if found) as well additional accounts. If blocked locally, but not locked globally, it could end like this. Avoided (and his impostors) are located in Germany and Austria, IP adresses found from other than these countries are probably open proxies and could be blocked for 1 year. Regards --Schniggendiller (talk) 23:28, 30 April 2018 (UTC)

Yes check.svg Done Ruslik (talk) 19:38, 1 May 2018 (UTC)

Global lock for 1misha sock

Status:    Done

Blatant sock. Edits are characteristic of 1misha (Mokledauf), previously globally locked for cross-wiki spam. hiàn 03:26, 1 May 2018 (UTC)

If the locking steward is a sysop at Commons, it would be appreciated if the user's contributions are cleaned up. hiàn 03:26, 1 May 2018 (UTC)
Yes check.svg Done Ruslik (talk) 19:17, 1 May 2018 (UTC)

Global lock for Ana Linda Ana

Status:    Done

WP0 abuser. --jdx Re: 07:48, 1 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 09:45, 1 May 2018 (UTC)

Global lock for Ell Moreno'h Classico'h

Status:    Done

WP0 abuser. --Schniggendiller (talk) 07:51, 1 May 2018 (UTC)

Yes check.svg Done by Vituzzu --Alaa :)..! 09:45, 1 May 2018 (UTC)

Global lock for Паша Горбаша

Status:    Done

Liza Veniza's sock, long-term abuse, cross-wiki vandalism. Marshmallych 09:40, 1 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 09:58, 1 May 2018 (UTC)

Global lock for DorcasKuhn31

Status:    Done

Spambot. Esteban16 (talk) 13:10, 1 May 2018 (UTC)

Yes check.svg Done - TNT 13:46, 1 May 2018 (UTC)

Global lock for BetteMcCloughry

Status:    Done

Spambot. Esteban16 (talk) 15:32, 1 May 2018 (UTC)

Yes check.svg Done - TNT 15:56, 1 May 2018 (UTC)

Global lock for Pika Pika Pikachu Pi!

Status:    Done

Cross-wiki vandalism. -★- PlyrStar93. Message me. 18:37, 1 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 19:07, 1 May 2018 (UTC)

Global lock for Hoggardhigh

Status:    Done

Vandalism-only accounts, socks of Hoggardhigh. -★- PlyrStar93. Message me. 20:54, 1 May 2018 (UTC)

Yes check.svg Done - TNT 21:14, 1 May 2018 (UTC)

Global unlock for Virajmishra

Status:    Not done

yes i have readed so I came after 3 month. And i don't have any other account neither i have created any editing. Please remove global blocking of my account. In future i will never ever try to make any account. Please unlock my this account virajmishra account as soon as possible. Thanks.2405:204:A582:4B02:D7C8:CAC0:877B:BA1D 07:25, 9 April 2018 (UTC)

@Ruslik0: User appealing this at my talk page. SA 13 Bro (talk) 11:36, 9 April 2018 (UTC)
What projects are you going to edit? Even if I unlock your account, you will remain blocked in English Wikipedia and Commons. Ruslik (talk) 20:05, 12 April 2018 (UTC)
This page is semi-protection, please answer your statement to Ruslik0 at your own talk page only. @Ruslik0: He also appealing the unblock request on English Wikipedia in not very long ago, have a look on this reviewed comment by admin Boing! said Zebedee. SA 13 Bro (talk) 21:26, 12 April 2018 (UTC)
@SA 13 Bro: I don't see any answer about Ruslik question on your talk page --Alaa :)..! 19:40, 30 April 2018 (UTC)
@علاء: He probably want to login his account and appealing something on English Wikipedia. SA 13 Bro (talk) 21:31, 30 April 2018 (UTC)
@SA 13 Bro: so we should close this request at this time! --Alaa :)..! 19:09, 1 May 2018 (UTC)
@Ruslik0 and علاء: He said he want to appeal the unblock request on English Wikipedia and participate editing related to the en:Bollywood and en:tollywood Indian film topics on his talk page. SA 13 Bro (talk) 18:26, 2 May 2018 (UTC)
X mark.svg Not done Based on their behavior in enwiki it is unlikely that they will ever be unblocked there (the talk page access was revoked last year). Therefore unlock for the purpose of requesting an unblock in enwiki does not make any sense. Ruslik (talk) 19:16, 2 May 2018 (UTC)

Global lock for cross-wiki vandals

Status:    Done

Obvious socks of the same cross-wiki vandal. This vandal has been vandalizing articles across multiple Wikimedia sites, uploading personal attack/vandalism images, and also engaging in degrading attacks on the English Wikipedia (some of those edits have been deleted). This vandal may also be an LTA. Please check for sleepers and also Globally Block the underlying IP(s). LightandDark2000 (talk) 01:36, 1 May 2018 (UTC)

The third account is unrelated, but it is also a cross-wiki vandal account (also see the edit filter logs). The account also appears to belong to a Neo-Nazi. LightandDark2000 (talk) 01:41, 1 May 2018 (UTC)
Yes check.svg Done Ruslik (talk) 19:23, 2 May 2018 (UTC)

Global lock for socks of Avoided (or an impostor)

Status:    Done

Please lock his socks, check the underlying IPs and block IPs and (if found) as well additional accounts. If blocked locally, but not locked globally, it could end like this. Avoided (and his impostors) are located in Germany and Austria, IP adresses found from other than these countries are probably open proxies and could be blocked for 1 year. Regards --Schniggendiller (talk) 10:49, 1 May 2018 (UTC)

Yes check.svg DoneDefender (talk) 17:15, 1 May 2018 (UTC)

Global lock for KeithChau567833

Status:    Done

Spambot. Esteban16 (talk) 23:23, 1 May 2018 (UTC)

Yes check.svg Done - TNT 13:08, 2 May 2018 (UTC)

Global lock for Tamara787 sock

Status:    Done

Tamara787 sock. hiàn 03:03, 2 May 2018 (UTC)

Yes check.svg DoneDefender (talk) 04:13, 2 May 2018 (UTC)

Global lock for Neoyahadonis

Status:    Done

Globally banned user Yahadzija. -★- PlyrStar93. Message me. 04:33, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 09:52, 2 May 2018 (UTC)

Global lock for WP0

Status:    Done

Wikipedia Zero abuse. -★- PlyrStar93. Message me. 04:44, 2 May 2018 (UTC)

Yes check.svg Done - TNT 13:08, 2 May 2018 (UTC)

Global lock for accounts

Status:    Done

Some sort of LTA. -★- PlyrStar93. Message me. 04:49, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 09:54, 2 May 2018 (UTC)

Global lock for several accounts

Status:    Done

Cross-wiki abuse, vandalism socking in multiple wikis. -★- PlyrStar93. Message me. 05:09, 2 May 2018 (UTC)

Yes check.svg Done - TNT 13:11, 2 May 2018 (UTC)

Global lock for Gibson bonito

Status:    Done

WP0 abusers. --jdx Re: 06:29, 2 May 2018 (UTC)

done. — regards, Revi 07:46, 2 May 2018 (UTC)

Global lock for 47살 윤 모 씨

Status:    Done

Cross-wiki abuse/vandalism. theinstantmatrix (talk) 07:36, 2 May 2018 (UTC)

From kowiki contribs, it is either 대우건설 or 보민개. Both are LTA who is locked on sight. Locked. — regards, Revi 07:38, 2 May 2018 (UTC)

Global lock for Bwedevibes News

Status:    Done

WP0 abuser. --jdx Re: 11:20, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 11:45, 2 May 2018 (UTC)

Global lock for Michelemassa2

Status:    Done

Sock of Michelemassa595959, cross-wiki issues. -★- PlyrStar93. Message me. 14:36, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 15:15, 2 May 2018 (UTC)

Global lock for WildaErvin296

Status:    Done

Spambot, blocked on nl.wiktionary after triggering mutiple filters --MarcoSwart (talk) 14:38, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 15:15, 2 May 2018 (UTC)

Global lock for Shameel Done socks

Status:    Done

Cross-wiki socks of Shameel Done abusing WP0 by doing self-promotion and so on. -★- PlyrStar93. Message me. 14:46, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 15:19, 2 May 2018 (UTC)

Global lock for Wilserfsi

Status:    Done

WP0 abuser. --jdx Re: 18:31, 2 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 18:32, 2 May 2018 (UTC)

Global lock for cross-wiki LTA ROXELANA22 sock (2)

Status:    Done

Obvious sock of the cross-wiki LTA User:ROXELANA22, given the username (especially the hatred implied towards the AN/TPS-43 article). Simply put, this user is known for many years of severe cross-wiki vandalism, obscenities, indirect death threats, and trolling. Like ROXELANA22's other sock accounts, this account needs to be Globally Locked because this LTA is known to re-use very old sleeper accounts (extending at least to 6 years), and also because he is known to "migrate" his socks to another wiki site to facilitate cross-wiki vandalism. Please also see the discussion here for more evidence of why these socks need to be Locked. The sock accounts ZiguratEnki, Antiantps43, and Revell34 are some of the best examples of his cross-wiki vandalism and extremely-old sleeper usage. LightandDark2000 (talk) 04:52, 24 April 2018 (UTC)

This sock needs to be Globally Locked, because I've learned recently from a couple of LTAs that locally-blocked socks can be recreated on other Wikimedia sites, and this LTA is known for migrating and "re-spawning" his locally-blocked socks. LightandDark2000 (talk) 00:45, 3 May 2018 (UTC)
@Green Giant, RadiX, Tegel, and There'sNoTime: Can you please Lock this sock? Thanks. LightandDark2000 (talk) 00:45, 3 May 2018 (UTC)
Yes check.svg Done, as seen in previous requests. RadiX 02:39, 3 May 2018 (UTC)

Global lock for sock of LTA User:Vandyrandy

Obvious sock of LTA User:Vandyrandy, given the vandalism on my talk page (on Wikipedia). Please also run a sleeper check for more socks on the underlying IP range, and please Globally Rangeblock the underlying IP range for at least 3-6 months (set to "anon-only"), because this vandal is known for mass socking and cross-wiki vandalism. The IP range could be the one I listed above (given the abuse on a specific user's talk page on Wikipedia). This LTA is known for Neo-Nazi style vandalism, personal attacks, and cross-wiki vandalism, so it's important to lock his accounts and Globally Block his IPs. LightandDark2000 (talk) 01:45, 30 April 2018 (UTC)

@LightandDark2000: please, read my comment here, but this time it is about «:5943:» and masks are 16 bits shorter. Incnis Mrsi (talk) 18:39, 30 April 2018 (UTC)
The problem is, his IPv6 ranges are usually much larger than that - if we are lucky, he might be limited to the /64 range this time. LightandDark2000 (talk) 00:56, 1 May 2018 (UTC)
I added another IP Range: 66.87.120.0/21. This range was recently abused by Vandyrandy, within the past couple of months. Just today, Vandyrandy, or another LTA known as the "Article-Blanking IP" was carrying out mass vandalism across Wikipedia. (There is some indication that the vandal responsible for the recent vandalism is Vandyrandy himself.) Since this range has been persistently abused by at least 1 or 2 LTAs within the last 6 months, please Globally Rangeblock this range for at least 3-6 months (set to "anon-only"). LightandDark2000 (talk) 04:08, 3 May 2018 (UTC)
Yes check.svg Done but range blocks are not warranted, in my opinion. Ruslik (talk) 18:33, 3 May 2018 (UTC)

Global lock for socks of Avoided (or an impostor)

Status:    Done

Please lock his socks, check the underlying IPs and block IPs and (if found) as well additional accounts. If blocked locally, but not locked globally, it could end like this. Avoided (and his impostors) are located in Germany and Austria, IP adresses found from other than these countries are probably open proxies and could be blocked for 1 year. Regards --Schniggendiller (talk) 00:47, 3 May 2018 (UTC)

Done. Stryn (talk) 16:07, 3 May 2018 (UTC)

Global lock for Meleshoui socks

Status:    Done

Group 1:

Group 2 (collapsed list due to large number of accounts):

Cross-wiki abuse. All these are confirmed as socks of Meleshoui per en:Wikipedia:Sockpuppet investigations/Meleshoui. -★- PlyrStar93. Message me. 02:11, 3 May 2018 (UTC)

Yes check.svg Done. RadiX 02:29, 3 May 2018 (UTC)

Global lock for two accounts

Status:    Done

Cross-wiki abuse. -★- PlyrStar93. Message me. 02:12, 3 May 2018 (UTC)

Done. RadiX 03:15, 3 May 2018 (UTC)

Global lock for spambots

Status:    Done

Obvious spambot accounts. The first and last accounts (along with G-Dymey) also have cross-wiki spamming/vandalism issues (also see their Edit Filter Logs). LightandDark2000 (talk) 02:14, 3 May 2018 (UTC)

Done. RadiX 04:14, 3 May 2018 (UTC)

Global lock for Test

Status:    Done

Was a long dormant (5+year) crat access account on test2wiki (rights removal requested already at SRP), however suspect was compromised then forgotten in 2016 when used to vandalize enwiki. --— xaosflux Talk 02:53, 3 May 2018 (UTC)

Done. RadiX 03:00, 3 May 2018 (UTC)

Global lock for Manda 1993

Status:    Done

Long-term abuse. --Ilzhabimantara (talk) 03:35, 3 May 2018 (UTC)

Done. RadiX 03:38, 3 May 2018 (UTC)

Global lock for Dreamland records

Status:    Done

Joseph kargbo spammer. -★- PlyrStar93. Message me. 04:29, 3 May 2018 (UTC)

Yes check.svg Done - TNT 10:25, 3 May 2018 (UTC)

Global lock for User:Frlrpltp454rtl

Status:    Done

Sock of cross-wiki date vandal Aliabbashiraqi79 (talk · contribs). Confirmed to Sermanda2303 (talk · contribs) on English Wikipedia. NinjaRobotPirate (talk) 05:26, 3 May 2018 (UTC)

Yes check.svg Done - TNT 10:25, 3 May 2018 (UTC)

Global lock for cross-wiki vandal

Status:    Done

Obvious vandalism-only account. The username is also offensive. This user has been vandalizing cross-wiki, so a Global Lock is needed here. Please also Check for sleepers and Globally Block the underlying IPs. LightandDark2000 (talk)

Yes check.svg Done - TNT 10:24, 3 May 2018 (UTC)

Global lock for Portal ap-news0

Status:    Done

WP0 abusers. --jdx Re: 08:37, 3 May 2018 (UTC)

Yes check.svg Done - TNT 10:21, 3 May 2018 (UTC)

Global lock for spambots

Status:    Done

Obvious spambot accounts. The first and last accounts (along with G-Dymey) also have cross-wiki spamming/vandalism issues (also see their Edit Filter Logs). LightandDark2000 (talk) 02:14, 3 May 2018 (UTC)

Done. RadiX 04:14, 3 May 2018 (UTC)

Global lock for Test

Status:    Done

Was a long dormant (5+year) crat access account on test2wiki (rights removal requested already at SRP), however suspect was compromised then forgotten in 2016 when used to vandalize enwiki. --— xaosflux Talk 02:53, 3 May 2018 (UTC)

Done. RadiX 03:00, 3 May 2018 (UTC)

Global lock for Manda 1993

Status:    Done

Long-term abuse. --Ilzhabimantara (talk) 03:35, 3 May 2018 (UTC)

Done. RadiX 03:38, 3 May 2018 (UTC)

Global lock for Dreamland records

Status:    Done

Joseph kargbo spammer. -★- PlyrStar93. Message me. 04:29, 3 May 2018 (UTC)

Yes check.svg Done - TNT 10:25, 3 May 2018 (UTC)

Global lock for User:Frlrpltp454rtl

Status:    Done

Sock of cross-wiki date vandal Aliabbashiraqi79 (talk · contribs). Confirmed to Sermanda2303 (talk · contribs) on English Wikipedia. NinjaRobotPirate (talk) 05:26, 3 May 2018 (UTC)

Yes check.svg Done - TNT 10:25, 3 May 2018 (UTC)

Global lock for cross-wiki vandal

Status:    Done

Obvious vandalism-only account. The username is also offensive. This user has been vandalizing cross-wiki, so a Global Lock is needed here. Please also Check for sleepers and Globally Block the underlying IPs. LightandDark2000 (talk)

Yes check.svg Done - TNT 10:24, 3 May 2018 (UTC)

Global lock for Portal ap-news0

Status:    Done

WP0 abusers. --jdx Re: 08:37, 3 May 2018 (UTC)

Yes check.svg Done - TNT 10:21, 3 May 2018 (UTC)

Global lock for spambots

Status:    Done

Spambot. Esteban16 (talk) 11:08, 3 May 2018 (UTC)

Yes check.svg Done - TNT 11:33, 3 May 2018 (UTC)

Global lock for Kawas2

Status:    Done

Self-promotion. Sock of Auwall. -★- PlyrStar93. Message me. 15:09, 3 May 2018 (UTC)

Yes check.svg Done --Alaa :)..! 15:19, 3 May 2018 (UTC)

Global lock for more spambots

Status:    Done

Just blocked as spambots on en.wiki. Please lock. TonyBallioni (talk) 15:56, 3 May 2018 (UTC)

d. Stryn (talk) 15:58, 3 May 2018 (UTC)

Global lock for Jethro Samuel

Status:    Done

WP0 abusers. --jdx Re: 17:55, 3 May 2018 (UTC)

Yes check.svg Done, Linedwell [talk] 18:01, 3 May 2018 (UTC)

Global lock for Astronomical user

Status:    Done

Sock of Yuri Yuzi. -★- PlyrStar93. Message me. 17:57, 3 May 2018 (UTC)

Yes check.svg Done Ruslik (talk) 18:36, 3 May 2018 (UTC)

Global lock for Amoroso-rod

Status:    Done

New sock puppet of Yahadzija. Эlcobbola talk 20:21, 3 May 2018 (UTC)

Done, thanks for reporting. Stryn (talk) 20:22, 3 May 2018 (UTC)

Global lock for spambots

Status:    Done

Spambot. Esteban16 (talk) 11:08, 3 May 2018 (UTC)

Yes check.svg Done - TNT 11:33, 3 May 2018 (UTC)

Global lock for socks of Avoided (or an impostor)

Status:    Done