User talk:Beetstra

From Meta, a Wikimedia project coordination wiki
(Redirected from User talk:COIBot)
Jump to navigation Jump to search


Hello[edit]

Are you available to provide admin help for me? I am new to this project, and in need, if you can. Thanks.John Cline (talk) 06:00, 31 October 2018 (UTC)

@John Cline: My admin work here is almost exclusively with the spam-blacklist. Other tasks I can see, but I am not proficient (or necessarily competent) there on this project. --Dirk Beetstra T C (en: U, T) 13:54, 1 November 2018 (UTC)
Thank you for that reply. I should have followed-up on my request by telling you that my situation had been resolved, which it has. Nevertheless, I do appreciate your reply. Best regards--John Cline (talk) 14:02, 1 November 2018 (UTC)

monitoring of problematic server /24?[edit]

Hi. Seasons greetings. I know that I can monitor an IP address at a time, however, is there the means to monitor an IP range? I can see some spambots have a nice target range in 209.124.86.0/24 and I am uncertain the best way to keep an eye on these, beyond monitoring each single IP address. Ideally I would love to kill these early and without intervention, though I have no idea how we can do that beyond blacklist on sight. Thanks for all you do.  — billinghurst sDrewth 01:50, 25 December 2018 (UTC)

Another problematic is the host range 85.13.141.0/24, see some at User:COIBot/XWiki/femmestyle.or.at  — billinghurst sDrewth 11:18, 13 January 2019 (UTC)
Hmm the last is just spotty, though it probably is server farm that has a range spamservers in among others, and they have a range of spam domains hosted among others. Is this something that is a negative count, though not necessarily a complete black mark? :-(  — billinghurst sDrewth 11:34, 13 January 2019 (UTC)
@Billinghurst: didn't we have a possibility to check usernames .. You can probably just check for editors who have a conflict-of-interest with '209.124.86' and '85.13.141'... --Dirk Beetstra T C (en: U, T) 12:25, 13 January 2019 (UTC)
spambots, so disposable one-use usernames. :-(  — billinghurst sDrewth 13:34, 13 January 2019 (UTC)

Command alias[edit]

Hi and happy new year. Would it be possible to create quickreport as an alias for quickcreate. I often end typing quickreport and noticing that it is not a command understood by the bot (my fault I know). Thanks for your help. Best regards, —MarcoAurelio (talk) 16:27, 19 January 2019 (UTC)

@MarcoAurelio: I will do that when I have time. There a couple of things that I need to work on when I have time. —Dirk Beetstra T C (en: U, T) 17:34, 19 January 2019 (UTC)
There's no urgency at all. Thank you. Best regards, —MarcoAurelio (talk) 17:37, 19 January 2019 (UTC)

What can we do to prevent problematic IP webserver targets?[edit]





Looking at

just shows spam homes where our spambots point. Do you have a better idea of how we can do some prevention rather than just maybe having a better target to check?  — billinghurst sDrewth 05:14, 9 February 2019 (UTC)

@Billinghurst: for starters, poke the ip of the server in a LinkSummary template, if it is not too much, COIBot will list all added domains on that server IP. Second, you may want to look for a reverse IP lookup service and collect all domains on that server, and preemptively blacklist them. (and maybe look at the whole /24 of IPs). Pinging User: MER-C, I guess he has more techniques. —Dirk Beetstra T C (en: U, T) 04:08, 10 February 2019 (UTC)
Thanks Beetstra. The whole range isn't an issue, it looks like it is just these two from my review, though the lag of COIBot makes it a little trickier for the while. I had pushed xwiki reports, though from IRC it seems that push failed for IP addresses, I will try again. I will consider the pre-emptive blacklisting.  — billinghurst sDrewth 10:01, 10 February 2019 (UTC)
@Billinghurst: I have just poked them. Bot seems to be busy with something else .. --Dirk Beetstra T C (en: U, T) 10:18, 10 February 2019 (UTC)
Yep it seems to spit out reports in batches, I was presuming that it has quiet times between imports, and spat out the reports. It is fine, it makes me do other things. FWIW I have asked Maggie Dennis if the WMF still has some domain lookup subscriptions available, they did years ago. Noting that IP Address 66.96.147.111 Reverse IP 9,346 websites use this address.  — billinghurst sDrewth 10:29, 10 February 2019 (UTC)

Linkwatcher reporting issues[edit]

Hi. LiWa3s are reporting Started linkanalysers - None seemed to be alive

Status is reported as …
<LiWa3_2> Syslogs: diffreader: 8940 secs. linkanalyser: 69 secs. linkparser: 225 secs. linkreporter: 5327470 secs. linkwatcher: 261 secs. output: -1 secs. script: -1 secs.
<LiWa3_3> LW: 165 days, 07:54:53 hours active; RC: last 34 sec. ago; Reading ~ 830 wikis; Queues: P1=0; P2=1; P3=0 (738 / 16759); A1=83; A2=106 (0 / 0); M=0 - In LinkWatcher edit-backlog: 0 files (0 lines) and in analyser backlog: 330 files (82536 lines).

It is collecting a few files. Thanks.  — billinghurst sDrewth 02:54, 16 February 2019 (UTC)

and d'oh, no COIBot in IRC  — billinghurst sDrewth 10:11, 16 February 2019 (UTC)

I hope I remember tomorrow morning to solve it. —Dirk Beetstra T C (en: U, T) 17:34, 16 February 2019 (UTC)