User talk:ST47
Could you do some webhost blocks?
I stumbled upon this Special:Contributions/185.183.179.65/24 webhost range, owned by Ibraheem Massalha who apparently uses https://ipinfo.io/AS17252 and https://ipinfo.io/AS42366 for his webhost company. I think the AS17252 ranges have all been blocked but there's a lot of AS42366 ranges which should probably be blocked. Wondering if you could do that? Galobtter (talk) 06:49, 15 April 2023 (UTC)
Please advise
At viwki, there is an Long term abuser with a long history of Proxy/VPN abuse. Specifically, this user paid to rent a VPN service through an app that they could switch between IPs when abusing. We used to implement IP range blocking over ASN in the past, but now they have bought a new VPN plan. Is there a way to thoroughly handle this problem (for example, completely blocking App VPN)? Thank you. Tryvix1509Let me know if I made a mistake 04:56, 22 April 2023 (UTC)
- @Tryvix1509:, there are some steps that we're taking to block some of the various VPN services, but there are a number of different types of services, not all can be easily blocked, and some will leave collateral damage due to the IP addresses used by the proxy service being closely interspersed with normal residential customers. If there's a specific service that you have in mind, please let me know - but know that the answer will probably be that the WMF themselves would be in the best position to defend against such situations by expanding the automatic blocking of Tor exit nodes to also use VPN threat intelligence feeds. We have asked them to do this, for example at restricted Phabricator task T265845, but there has not been much interest. ST47 (talk) 23:58, 23 April 2023 (UTC)