Steward requests/Global: Difference between revisions
Line 322: | Line 322: | ||
=== Global block for [[Special:Contributions/124.239.251.20|124.239.251.20]] === |
=== Global block for [[Special:Contributions/124.239.251.20|124.239.251.20]] === |
||
{{Status}} <!-- Do not remove this template --> |
{{Status|done}} <!-- Do not remove this template --> |
||
* {{Luxotool|124.239.251.20}} |
* {{Luxotool|124.239.251.20}} |
||
Repeated cross-wiki vandalism after block on 31 March 2018. Removes infoboxes, makes pseudo-valuable modifications to templates: diffs [https://commons.wikimedia.org/w/index.php?title=Беларусь&curid=281554&diff=310415046&oldid=303337937], [https://ru.wikipedia.org/w/index.php?title=%D0%A8%D0%B0%D0%B1%D0%BB%D0%BE%D0%BD:%D0%A2%D0%B0%D0%BD%D0%BA&diff=93828917&oldid=92199206]. --[[User:Jarash|Jarash]] 11:13, 10 July 2018 (UTC) |
Repeated cross-wiki vandalism after block on 31 March 2018. Removes infoboxes, makes pseudo-valuable modifications to templates: diffs [https://commons.wikimedia.org/w/index.php?title=Беларусь&curid=281554&diff=310415046&oldid=303337937], [https://ru.wikipedia.org/w/index.php?title=%D0%A8%D0%B0%D0%B1%D0%BB%D0%BE%D0%BD:%D0%A2%D0%B0%D0%BD%D0%BA&diff=93828917&oldid=92199206]. --[[User:Jarash|Jarash]] 11:13, 10 July 2018 (UTC) |
||
:{{done}} for 3 months '''--'''[[User:علاء |<font size="3" face="Script MT Bold" style="color:black;">Alaa</font> ]] [[User_talk:علاء |:)..!]] 21:39, 13 July 2018 (UTC) |
|||
== Requests for global (un)lock and (un)hiding == |
== Requests for global (un)lock and (un)hiding == |
Revision as of 21:39, 13 July 2018
Due to persistent vandalism and disruption on this page, this page is currently semi-protected indefinitely. Globally blocked or locked users should appeal to stewardswikimediaorg or UTRS. If your account was locked with a reason "Compromised account", please contact cawikimediaorg. |
- For global IP block requests, read the guideline and make a request below under Requests for global (un)block. Indicate why a global block is necessary and for how long.
- For account lock requests, read the guideline and post under Requests for global (un)lock and (un)hiding.
- For local requests here on Meta, see Meta:Requests for help from a sysop or bureaucrat.
If you are here because you have been affected by a global block, please see Global blocks/FAQ for more information about global block and routes to appeal.
Note: (un)blocks apply to IP addresses; and (un)locks apply to global accounts.
Cross-wiki requests |
---|
Meta-Wiki requests |
Requests for global (un)block
Please be sure to follow the instructions below:
|
Global block for 85.118.80.0/22
- 85.118.80.0/22 xwiki-contribs • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Cross-wiki vandalism. — Jeff G. ツ 09:27, 24 June 2018 (UTC)
Global block for 95.26.124.172
- 95.26.124.172 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Hello.
This is the new IP of the cross-wiki long-term abuser (since at least mid-June 2017) who is described in Steward requests/Global/2018-05#Global block for 95.26.0.0/16.
So far, the new IP has attacked only one project, but usually this abuser is keeping one IP for several days and, when active, is quickly attacking several projects.
Note: IP range blocks would be inefficient (cf. this request) and a global filter would be inefficient (cf. this request).
Regards --NicoScribe (talk) 14:54, 26 June 2018 (UTC)
- @NicoScribe: 1 edit since 25 June?! --Alaa :)..! 05:59, 27 June 2018 (UTC)
- @علاء: yes, but:
- this abuser has done more than 800 edits (of cross-wiki sneaky vandalism)
- this is a long-term abuser (since at least mid-June 2017)
- usually this abuser is keeping one IP for several days (the last IP of this abuser that you have blocked had 35 edits found in 6 projects stretched on 4 days, and you can see other cases such as 82 edits found in 17 projects stretched on 18 days and 88 edits found in 12 projects stretched on 14 days).
- So, I can't report the problem here as soon as I detect a new IP, to slow down this cross-wiki long-term abuser (and avoid a vandalism wave today or tomorrow)? If I have to wait the end of a vandalism wave before reporting the problem here, does it slow down this cross-wiki long-term abuser? --NicoScribe (talk) 08:16, 27 June 2018 (UTC)
- @علاء: In the end, 95.26.124.172 has done 8 edits in 4 projects stretched on 3 days. But it is too late now, because:
- the abuser has used 176.59.54.46 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye, with 2 edits in 2 projects, on 30 June
- the abuser is now using 176.59.32.149 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye, with 1 edit in 1 project, on 1 July
- --NicoScribe (talk) 15:07, 1 July 2018 (UTC) → 20:29, 2 July 2018 (UTC)
- @علاء: In the end, 95.26.124.172 has done 8 edits in 4 projects stretched on 3 days. But it is too late now, because:
- @علاء: yes, but:
@NicoScribe: this section of Steward_requests/Global is about blocks for IP addresses and their ranges, not for sockpuppet investigations or chasing individual baddies in any way. If you see another abusive IP—especially in a completely different network—then just open a new request. Note that 176.59.32.0/19 belongs to Tele2 Russia Groups that is a mobile provider and individual IPs are volatile. Incnis Mrsi (talk) 11:37, 3 July 2018 (UTC)
- @Incnis Mrsi: thank you for your comments. I am sorry, my request has been imprecise. In fact, I am just requesting a temporary global block for the current IP of this cross-wiki long-term abuser, which is now 176.59.32.149. If this discussion with علاء were finished, I would have mentioned 176.59.32.149 in a new request (instead of mentioning it in this request).
- My understanding of the situation is:
- The investigation (with duck test) has been done in the first request and in the second request. Since (at least) mid-June 2017, this cross-wiki long-term abuser is using 4 IP ranges (83.220.236.0/22 + 95.25.0.0/15 + 176.14.0.0/16 + 176.59.32.0/19). No account is involved. I am not requesting a sockpuppet investigation.
- The available solutions are:
- globally block the IP ranges → would be inefficient (cf. first request)
- create a global filter → would be inefficient (cf. second request)
- globally block the vandal one IP at a time (this is the only thing that I am requesting here, just a temporary global block for the current IP: 176.59.32.149)
- complain to the ISP, like you have suggested in the first request (but I have never done that).
- The IP blocks on the English Wikipedia did not slow down this abuser (due to the cross-wiki abuse). I know that individual IP are volatile but usually this abuser is keeping one IP for several days and, in my knowledge, only two IP have been globally blocked so far ([1] and [2]), so I think that the solution n°3 is still worth a try. Are you (and علاء) saying that the solution n°3 would be inefficient too? --NicoScribe (talk) 16:43, 3 July 2018 (UTC)
- 95.26.124.172 is a “slow” IP address (some friends of mine used Corbina/Beeline in 2008–11), hence it may be blocked. As for Tele2 Russia, in short, is the abuse intense enough to block a mobile IP address globally? They are usually subject to change in few hours, and if we have a dangerous long-time abuser operating from there, then other measures should be tested (such as mapping his IPs and putting infested ranges under anon-only global block). Incnis Mrsi (talk) 18:33, 3 July 2018 (UTC)
@Incnis Mrsi: I don't know. I've made the following list.
List of 122 Russian IP, with 1313 edits | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
The IP are mainly in the second and fourth IP ranges (but I repeat that IP range blocks have been rejected in the first request: too much collateral damage). --NicoScribe (talk) 15:24, 4 July 2018 (UTC)
Global block for 2601:18C:C901:C820::/64
- 2601:18C:C901:C820::/64 xwiki-contribs • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye extended from a point to a /64 – see below. Incnis Mrsi (talk) 08:43, 2 July 2018 (UTC)
Cross-wiki vandalism. — Jeff G. ツ 17:15, 1 July 2018 (UTC)
The user appears to have moved on to 66.31.222.166 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye and 2601:18C:C901:C820:990B:ECD2:AAFD:DA24 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye. — Jeff G. ツ 23:55, 1 July 2018 (UTC)
Global block for 66.31.222.166
- 66.31.222.166 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Jeff G. claims cross-wiki vandalism above. I, Incnis Mrsi, see only vandalism in en.Wikipedia. Incnis Mrsi (talk) 08:43, 2 July 2018 (UTC)
- @Incnis Mrsi: This vandal did not edit cross-wiki with this IP address, I never claimed it did. However, the IP edit history of en:Wikipedia talk:WikiProject Hawaii/Outreach/News Bureau/Kavebear is quite convincing. — Jeff G. ツ 12:04, 5 July 2018 (UTC)
Global block for 195.206.3.188
- 195.206.3.188 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Open proxy located in Brescia, Lombardia Region, Italy (IT). --Web Source Self-Management System (talk) 07:44, 10 July 2018 (UTC)
- Not done Does not appear to be an open proxy - TNT 💖 20:32, 13 July 2018 (UTC)
Global block for 124.239.251.20
- 124.239.251.20 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Repeated cross-wiki vandalism after block on 31 March 2018. Removes infoboxes, makes pseudo-valuable modifications to templates: diffs [3], [4]. --Jarash 11:13, 10 July 2018 (UTC)
- Done for 3 months --Alaa :)..! 21:39, 13 July 2018 (UTC)
Requests for global (un)lock and (un)hiding
Note that global blocking currently only applies to IPs, due to a technical limitation. If you wish to request a named account for global [un]locking, please request a global [un]lock here instead. Be sure to follow the instructions below:
Please describe abusive activity of an account before reporting them here. Since stewards are often not active at projects the reported accounts are, things that seem obvious to you may not be equally obvious to the reviewing steward.
|
Global lock for Nicolas-Albo
- Nicolas-Albo (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
- Nicolas 1993 Albo (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
- Nick 07 1993 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
Hello.
Nicolas-Albo is a cross-wiki long-term vandal since (at least) September 2017. When someone's first name is not "Nicolas", the vandal adds the first name "Nicolas" in the article. When someone's first name is "Nicolas", the vandal adds invented first name(s) in the article. "-Albo" is perhaps a short form of "Alberto", because sometimes the vandal adds the first name "Alberto" too. Nicolas-Albo is already blocked indefinitely on 4 projects, for vandalism. Nicolas 1993 Albo and Nick 07 1993 are blocked indefinitely on the Spanish Wikipedia because they were doing the same vandalisms on the same articles. I request global locks of the 3 accounts (their last edit has been done on 17 May, but the vandal is still active cross-wiki with his IP).
Remarks about the IP ranges used by Nicolas-Albo | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
The "duck test" is clear with the Chilean IP listed below, in the 4 ranges. For instance, in this article's history, you can see Nicolas-Albo and several IP (bypassing the account's block); in this article's history, you can see Nicolas-Albo, Nick 07 1993 and several IP (bypassing the account's block); in this article's history, you can see Nicolas 1993 Albo, Nick 07 1993 and several IP (bypassing the account's block). These 4 IP ranges can not be blocked, because legitimate contributors are using them too. But I want to mention the IP ranges here, and I will request future blocks of the vandal one IP at a time, if necessary.
|
Regards --NicoScribe (talk) 21:37, 17 June 2018 (UTC) → 16:16, 12 July 2018 (UTC)
Global lock for Hhhggg2
- Hhhggg (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
- Hhhggg2 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
Hhhggg's sock puppet goes on to abuse the email feature to spam across multiple projects. --Well-Informed Optimist (talk) 16:25, 19 June 2018 (UTC)
- Oppose: I am not a vandal. Inviting to election is not prohibited neither by metawiki's rules nor by ruWP's rules. Hhhggg2 (talk) 16:29, 19 June 2018 (UTC)
- Already locked globally as Hhhhggg (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser), so this qualifies as LTA. stjn[ru] 17:25, 19 June 2018 (UTC)
- Removed ‘withdrawn’ template, people report continuous abuse from this user that is already locked globally and should be locked on his socks. Relevant topic. stjn[ru] 17:25, 21 June 2018 (UTC)
- Actually, the master account hasn't been Locked yet. Stewards should consider Locking both accounts and running a sleeper check if there is actual abusse coming from this user. LightandDark2000 (talk) 23:19, 7 July 2018 (UTC)
- Sorry, I meant Hhhggg (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser). That’s locked account. stjn[ru] 19:30, 12 July 2018 (UTC)
- Actually, the master account hasn't been Locked yet. Stewards should consider Locking both accounts and running a sleeper check if there is actual abusse coming from this user. LightandDark2000 (talk) 23:19, 7 July 2018 (UTC)
Sockpuppet or not, but Hhhggg2 is evidently a non-positively contributing account reportedly sending junk Email to multiple users. Unsure why stewards meditate so long on this case. @Stjn: if I understand correctly, Hhhhggg is unrelated in any way? Could you please remove the {{LockHide}} with this account to avoid misfire? Incnis Mrsi (talk) 19:02, 13 July 2018 (UTC)
Global lock for Washim Rahman
- NazmulMusic (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
- Washim Rahman (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
The last time I reported this user was not blocked so adding my request again since the suspected sockpuppet has been blocked. There is a long-term and extensive cross-wiki abuse (please see this. Recreating their deleted article en:Prem Khan under various titles please see en:Wikipedia:Sockpuppet investigations/Washim Rahman. Thank you. GSS (talk) 18:26, 23 June 2018 (UTC)
- Where is cross-wiki abuse? Ruslik (talk) 20:01, 24 June 2018 (UTC)
- Sorry for the late reply, they are using multiple accounts in other languages to promote their subject such as as-wiki (as:প্ৰেম খান), bn-wiki (bn:প্রেম খান), bpy-wiki (bpy:প্রেম খান) etc. please see the history of these articles and repeated attempt to create the same article in en-wiki using multiple accounts. Thank you. GSS (talk) 09:56, 1 July 2018 (UTC)
Global lock for Nikincce
- Nikincce (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
Admitted previously undisclosed shared use in this edit. — Jeff G. ツ 04:20, 25 June 2018 (UTC)
Global lock for Satori&Ascension
- Satori&Ascension (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
User:冏's socketpuppet doing cross-wiki vandalism.--云间守望 - (Talk with WQL) 04:00, 28 June 2018 (UTC)
- Done --Alaa :)..! 21:35, 13 July 2018 (UTC)
Global lock for Bonsoirparis
- Bonsoirparis (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
Cross-wiki vandalism. --Tractopelle-jaune (talk) 19:12, 13 July 2018 (UTC)
- Done - TNT 💖 19:23, 13 July 2018 (UTC)
Global lock for Dopenguins sock
- Hot Runner (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
New sock of Dopenguins. -★- PlyrStar93 →Message me. ← 19:50, 13 July 2018 (UTC)
- Done - TNT 💖 20:01, 13 July 2018 (UTC)
Global lock for But where were they going without ever knowing the way?
- But where were they going without ever knowing the way? (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
Cruizir or imposter. -★- PlyrStar93 →Message me. ← 21:00, 13 July 2018 (UTC)
- Done - TNT 💖 21:11, 13 July 2018 (UTC)
Global lock for spambots
- ErnestDawe83510 (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
- XGZNatalia (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser)
Triggered the global filter 162 in pt.wikinews. --Editor D.S (talk) 21:30, 13 July 2018 (UTC)
- Done, reviewing IPs - TNT 💖 21:34, 13 July 2018 (UTC)
See also
- Archives
- 2023: w1, w2, w3, w4, w5, w6, w7, w8, w9, w10, w11, w12, w13, w14, w15, w16, w17, w18, w19, w20, w21, w22, w23, w24, w25, w26, w27, w28, w29, w30, w31, w32, w33, w34, w35, w36, w37, w38, w39, w40, w41, w42, w43, w44, w45, w46, w47, w48, w49, w50, w51, w52, w53
- 2024: w1, w2, w3, w4, w5, w6, w7, w8, w9, w10, w11, w12, w13, w14, w15, w16, w17, w18, w19, w20, w21
General requests for: help from a Meta sysop or bureaucrat · deletion (speedy deletions: local · multilingual) · URL blacklisting · new languages · interwiki map
Personal requests for: username changes · permissions (global) · bot status · adminship on Meta · CheckUser information (local) · local administrator help
Cooperation requests for: comments (local) (global) · translation