User talk:ST47: Difference between revisions

I stumbled upon this Special:Contributions/185.183.179.65/24 webhost range, owned by Ibraheem Massalha who apparently uses https://ipinfo.io/AS17252 and https://ipinfo.io/AS42366 for his webhost company. I think the AS17252 ranges have all been blocked but there's a lot of AS42366 ranges which should probably be blocked. Wondering if you could do that? Galobtter (talk) 06:49, 15 April 2023 (UTC)[reply]

Please advise

At viwki, there is an Long term abuser with a long history of Proxy/VPN abuse. Specifically, this user paid to rent a VPN service through an app that they could switch between IPs when abusing. We used to implement IP range blocking over ASN in the past, but now they have bought a new VPN plan. Is there a way to thoroughly handle this problem (for example, completely blocking App VPN)? Thank you. Tryvix1509^{Let me know if I made a mistake} 04:56, 22 April 2023 (UTC)[reply]

@Tryvix1509:, there are some steps that we're taking to block some of the various VPN services, but there are a number of different types of services, not all can be easily blocked, and some will leave collateral damage due to the IP addresses used by the proxy service being closely interspersed with normal residential customers. If there's a specific service that you have in mind, please let me know - but know that the answer will probably be that the WMF themselves would be in the best position to defend against such situations by expanding the automatic blocking of Tor exit nodes to also use VPN threat intelligence feeds. We have asked them to do this, for example at restricted Phabricator task T265845, but there has not been much interest. ST47 (talk) 23:58, 23 April 2023 (UTC)[reply]

Thanks for your reply. Next time, when I have more free time, I will list the IPs that this LTA uses. However, there was a sysop in the past that implemented a strategy in proxy blocking, and it seems to work quite well, see vi:User:Plantaest/Nháp 26. Also, I see you have ST47ProxyBot, how does your bot work? P/s: Looks like I don't have permission to view the Phab task. Tryvix1509^{Let me know if I made a mistake} 14:47, 24 April 2023 (UTC)[reply]

A lot of edits

I'm just patrolling the recent changes page, and your "changing block settings" takes up ~85% of all of the changes I'm seeing? Is this a glitch or something? Not accusing you of anything, just wondering. AugustusAudax (talk) 01:06, 24 April 2023 (UTC)[reply]

@AugustusAudax: What is your recent changes filter? Tryvix1509^{Let me know if I made a mistake} 14:48, 24 April 2023 (UTC)[reply]

Just the default. AugustusAudax (talk) 15:25, 24 April 2023 (UTC)[reply]

@AugustusAudax:, I was extending a number of IP rangeblocks targetting proxies and VPNs which were set to expire soon, but which are still relevant. You can hide "logged actions" from recent changes if you wish to see only edits. ST47 (talk) 17:23, 24 April 2023 (UTC)[reply]

@@ Line 30: / Line 30: @@
 :{{Ping|AugustusAudax}} What is your recent changes filter? [[User:Tryvix1509|<span style="color:	#f211c5 ;font:18px Constantia;">''Tryvix1509''</span>]]<sup>[[User:Tryvix1509|Let me know if I made a mistake]]</sup> 14:48, 24 April 2023 (UTC)
 ::Just the default. [[User:AugustusAudax|AugustusAudax]] ([[User talk:AugustusAudax|talk]]) 15:25, 24 April 2023 (UTC)
+:::{{re|AugustusAudax}}, I was extending a number of IP rangeblocks targetting proxies and VPNs which were set to expire soon, but which are still relevant. You can hide "logged actions" from recent changes if you wish to see only edits. [[User:ST47|ST47]] ([[User talk:ST47#top|talk]]) 17:23, 24 April 2023 (UTC)