WikiIndex:Open proxy events - 2014-03

Originally created by User:Abd as a sub-page from his own user page, this began as a list of IP addresses involved in harassment of Leucosticte here on WikiIndex. Below, there are additional IPs that vandalize. It turns out, so far, that all involved IPs in harassment are using open proxies. No legitimate edits have been noticed in this period from open proxies. There is a possible obvious recommendation.

The time period begins with 7 March 2014, the appearance of Sophie Wilder here, going after Leucosticte. Sophie Wilder, presumably the same user, is a moderator on RationalWiki. ('Sysop' on RationalWiki means almost nothing. I am a sysop on RationalWiki. At least today I am! Moderators there are elected and have advanced privileges.

For each IP, I searched for global blocks on the Wikimedia Meta-Wiki at meta.Wikimedia.org. If the IP showed as globally blocked, I linked to the global block display for it. no means not blocked globally. Most Meta blocks for open proxies are range blocks.

Then, if the IP was not globally blocked on Meta, I searched for the IP with Google.

See Wikipedia WikiProject on identifying open proxies. I am not going to those lengths. I'm just looking for obvious indications by Googling the address. If a search showed accusations of open proxy, that is shown by 'Google'. If not, by 'no Google evidence'. I did not search for addresses shown as blocked open proxies by Meta.

IP harassment

IP address	WikiIndex block status	WMF global block	notes / comments
194.132.32.42	short-term block	nb	Google
5.199.130.188	1 contrib, harassing, short-term block	no	(same user as above, threatens TOR) see open proxy
77.244.254.227	short-term block		open proxy
37.221.162.226	4 contribs, harassing, blocked		really nasty evil harassment; open proxy
77.95.231.11	1 contrib, harassing, short-term block	no	evil harassment; Google
70.39.66.59	3 contribs, short-term block	no	Google
93.184.66.227	1 contrib, short-term block		open proxy
89.207.132.76	1 contrib, harassing, not blocked	no	Google
109.163.234.2	short-term block		open proxy
62.210.129.149	short-term block		open proxy
212.232.24.57	short-term block	no	Google
95.130.9.190	blocked		open proxy
77.247.181.164	not blocked	no	harassing, active, connected with other harassing IPs, see [1], Google
171.25.193.20	contributions possibly positive		open proxy
81.89.96.89	1 contrib, blocked		open proxy
141.138.141.208	1 contrib, harassment, not blocked	no	Google
178.217.187.39	1 contrib, blocked	no	Google
77.109.141.138	2 contribs, harassing, not blocked	no	Google
82.94.251.227	blocked	no	Google
37.221.171.236	blocked		open proxy
198.96.155.3	blocked (one old edit from this IP)		open proxy
109.163.234.7	harassment, not blocked		note same range as above, x.x.x.2 open proxy threatens ddos attacks
192.99.8.96	harassment, not blocked		new attack page creation, spambot, likely open proxy
212.83.187.52	harassment, not blocked	no	Google
95.211.98.166	harassment, not blocked		open proxy
81.169.151.138	harassment, not blocked	no	Google
5.104.224.5	harassment, not blocked	no	Google
77.109.141.138		no	Google
85.10.211.53			open proxy This IP did not go after Leucosticte or site admin, but after a new user, apparently the same as .241 listed above with 'many positive contributions', who is now doing a great deal of positive editing from a registered account. If the IP is connected with the attack on Leucosticte, this would be an attempt to harass a WikiIndex user as retaliation for the site allowing Leucosticte to edit.
185.17.93.142		no	Google
77.247.181.164		no	Google

Fascinating how some who call others "cowards" are using anonymizing techniques, starting with IP editing, then anonymizing the IP, while harassing registered users who are using — or readily connected with real names. Cowards, full of hatred, terrorists.

Related

That these are related does not indicate specific connection. While Sophie Wilder was radically uncivil, that is merely the custom at RationalWiki. I have seen no evidence that the IP connection with Sophie Wilder was anything more than an offer of assistance from them to her. I know of no history of Sophie Wilder using open proxies.

• Special:Contributions/Sophie Wilder blocked

• Evil-Unveiled

• 76.28.31.199 was me (Abd).

• 213.93.202.241 many positive contributions; no, no Google evidence.

Disclosure of Abd's position

Leucosticte is a user who can generate controversy. He supports highly unpopular causes However, he also absolutely responds to community restraint, usually, if it is civil and rational. He may argue endlessly, given the opportunity, but he is also capable of backing off and simply contributing within site purpose.

My initial work here was to interdict the vandalism, the attack on Leucosticte, which was pure bullying and what I called "terrorism"; that is, an attempt to attain ends deemed, by the terrorists, to be so important as to allow massive collateral damage, and whatever extreme action is considered, by them, as necessary. The enemies of Leucosticte have done much worse than what has been seen here. Threats of physical violence have been made, and threats have extended to others seen as defending him; i.e., to Abd. Here, there has merely been gross incivility, vandalism, and revert warring.

The flood of IP vandalism having abated, for the moment, I then turned to the other side of this. Leucosticte has been adding provocative content here. I have begun to tag some of this for deletion. One might, in Leucosticte's defense, notice that he does not revert war over a deletion tag. Rather, he argues on the attached talk page. He is an experienced wiki user, and only revert warred, in the last week, with blatant vandals. (As did I).

(I was blocked on a WMF wiki by a somewhat dizzy admin for revert warring with a blocked editor, editing IP, who was repeatedly adding 'outing' information. And I'd do it again. Basically, being blocked causes no pain. The real problem there was administrative inattention, a common problem on wikis. The administrator who blamed me for disturbing his nap. No, I did, however, probably cause him to wake up a little sooner. Which was the point. Otherwise there would have been one or two edits buried in the noise.)

(There is a policy here against revert warring. Such policies need exceptions. The policy assumes good faith editing.) --Abd (talk) 21:53, 12 March 2014 (UTC)

Ancient history

Looking back a bit further:

• 92.28.210.211 edited 16:59, 3 March 2014, identifying as Sophie. The edit was non-disruptive, to RationalWikiWiki. The last editor before her was Leucosticte. The IP is blocked here, now, though that IP was not used to make any disruptive edits. This is not an open proxy, apparently. Sophie is really Sophie.
• User:Sophie Wilder was created here 00:08, 4 March 2014.
• The first edit of the registered Sophie Wilder was 09:16, 4 March 2014, a non-disruptive edit to Talk:RationalWiki (en). (It looks from her user registration declaration that she may have edited here before. Name not given.)
• However, the next edit was 09:19, 4 March 2014, recognizing Leucosticte and attacking him. She pretends surprise at his presence. From the speed with which she found his work, it seems likely that she came here, knowing what she would find.
• The offer of assistance from massive TOR editing came March 5 on her talk page. She did not reject or discourage the offer. Looking back, there was IP editing harassing Leucosticte — or at least calling attention to his politics — for quite some time.

IP address	WikiIndex block status	WMF global block	notes / comments
77.247.181.162		no	3 March 2014 possible vandalism, unclear; Google
62.210.129.149	blocked (presumably from later activity)		listed above as open proxy, was active 1 March 2014 with a largely harmless edit
77.109.141.138			listed above as open proxy, was also active 27 February 2014 with an apparently harmless edit; however, the change appears to be incorrect, subtle vandalism, perhaps
171.25.193.20			listed above as open proxy, was active 26 February 2014
‎77.247.181.164		no	active 25 February 2014, created Category:Pedophilia and applied it to Nathan Larson wikis; Google; intentions became clear with [2]
185.12.7.248		no	Google
198.180.167.4		no	Google
173.254.216.69			open proxy
‎94.102.49.175		no	Google
194.132.32.42		no	Google
94.242.205.2			23 February 2014 open proxy
68.57.45.104		no	is Nathan Larson; no Google evidence
77.1.238.255		no	odd - added false start date to ChildWiki; no Google evidence

No more possibly related IP edits seen in the last 99 days, back to 11 December 2013.