Open main menu
Welcome to zzuuzz's talk page. zzuuzz will probably reply on this page to messages left here unless you indicate you would prefer otherwise or you look like you might need the notification or if the discussion is actually happening elsewhere. Please add a new section to the end, and sign your message using ~~~~. Thanks. -- zzuuzz

Contents

Choopa/VultrEdit

I did remember. 95.179.176.0/20 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · block user · block log) is in need of a block (see Special:Contributions/95.179.183.45 / 95.179.183.45.vultr.com). - Tom | Thomas.W talk 19:56, 18 January 2019 (UTC)

Shingling334 is currently editing from choopa/vultur 199.247.19.165 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)... --IamNotU (talk) 00:34, 23 January 2019 (UTC)

Bidhan Singh vandalizerEdit

Looks like the filters didn't work, as Bidhan Singh is back causing disruption. I guess I'm going to have to accept it. Wikipedia simply can't stop the guy :( GoodDay (talk) 16:48, 21 January 2019 (UTC)

Hi Zzuuzz, Does the edit filter not work on talk pages ? this is third such edit on talk page in 3 days. [1] --DBigXray 14:55, 24 January 2019 (UTC)
You are indeed currently correct, and I cordially refer you at this time to my ANI posts on the topic. Feel free to hassle me further, however. -- zzuuzz (talk) 16:49, 24 January 2019 (UTC)
All right, I will continue keeping an eye on these talk pages. What is the hit count on the Bidhan Singh filter so far? --DBigXray 17:06, 24 January 2019 (UTC)
We are at 12, with regular stuff plus this template possibly a newer target. -- zzuuzz (talk) 21:28, 24 January 2019 (UTC)
OK, you won't see that in that form again. And thus we've moved forward to the latest edits. -- zzuuzz (talk) 14:59, 25 January 2019 (UTC)
you won't see that in that form again.. meaning in the form that includes his name ? . Do we already have an LTA page on this ? is he eligible for one ? (I believe he does) --DBigXray 15:07, 25 January 2019 (UTC)
Who knows what they'll do next. I'm not persuaded about an LTA page, however it may be beneficial to make some notes at the SPI, especially, but not exclusively, anything before this month. -- zzuuzz (talk) 15:11, 25 January 2019 (UTC)

As you can see, Bidhan Singh isn't going to stop. Perhaps, Wikimedia needs to step in. GoodDay (talk) 04:23, 1 February 2019 (UTC)

  Moved from WP:AIV

(User:Oshwah lets discuss further on User_talk:Zzuuzz since this entry was going to be removed by AIV bot.)

  Warned user. The IP user's edits seem to be editing tests or good faith attempts to edit or see what can be edited. Left a warning accordingly. ~Oshwah~(talk) (contribs) 06:24, 11 February 2019 (UTC)
it is a Dynamic IP of a narcissist WP:LTA vandal, whose self promotional campaign has been checked by edit filters (thanks to Zzuuzz), hence he is resorting to such nonsensical disruptive, edits. For pages that are regularly vandalized, I also seek page protection e.e. diff, diff. Based on what I have seen recently, his IP is dynamic, but he continues on 10-15 disruptive edits, so IMHO it makes sense to block his IP which is why I had reported him at AIV, If admins like Zzuuzz and Oshwah feel that it is not worth blocking then I will save my efforts in future and let him continue his vandalism for the day. --DBigXray 07:12, 11 February 2019 (UTC)
User:Oshwah Just noting that the IP Special:Contributions/2405:205:A081:553:9122:1321:E028:67FC continues his efforts of "good faith attempts to edit" . While we discuss, if posting him at AIV makes sense. regards. --DBigXray 07:20, 11 February 2019 (UTC)
Ahh, this huge IP range-hopping tomfoolery again... Yeah, I've been trying to figure out a good way with dealing with this throughout the day today... unfortunately, there's no perfect option. The ranges are incredibly wide, the articles edited are many, and the issues are ongoing. I've blocked the IP above for evasion. I'm interested to see how quickly the edits hop from one IP and range to another... ~Oshwah~(talk) (contribs) 07:25, 11 February 2019 (UTC)
yes, good call on blocking the IP, better late than never. you can also see thoughts of other page watchers at User_talk:GoodDay#Requested PP for 2 pages already on how he behaves. --DBigXray 07:32, 11 February 2019 (UTC)
@Oshwah: I'll generally insta-block a /64 for a day or so if it's within the last day or so (with good reason, although not entirely effective). There's at least two common ranges which are something like 2405:204:C000::/39 and 2405:205:A000::/39. And we're filtering with 58 and 478. It's a tricky one to nail down. I'm hoping this is just a final spurt before they get bored. -- zzuuzz (talk) 08:47, 11 February 2019 (UTC)
Zzuuzz - Thanks for the information. Yup, that's what I found when I looked into it and did some digging on the IP ranges involved; they're two very wide ranges that are both from the same ISP and geolocation, and (as you said) a tough situation to crack down on that doesn't have a silver bullet solution. I hope so, too... we'll find out one way or another. ;-) Thanks again for the input. Cheers - ~Oshwah~(talk) (contribs) 08:53, 11 February 2019 (UTC)
@Oshwah: Can't we not temporarily protect Indian Central Government related pages. He mostly vandalizes those pages. - Fylindfotberserk (talk) 09:40, 11 February 2019 (UTC)

───────────────────────── Fylindfotberserk - I've been applying them to the articles I saw while handling various issues from this IP range, but certainly not all of them. If there are any that aren't protected that need to be, file requests at WP:RFPP and I'll check them out. ~Oshwah~(talk) (contribs) 09:42, 11 February 2019 (UTC)

@Oshwah: OK I'll RPP articles as soon as I find any vandalism on them by this Bidhan Singh guy. I'll mention his "name" in the request as well. - Fylindfotberserk (talk) 09:50, 11 February 2019 (UTC)
Fylindfotberserk - Perfect. ;-) ~Oshwah~(talk) (contribs) 09:54, 11 February 2019 (UTC)
  • Yes Fylindfotberserk, and while filing a RFPP, also add a link to this thread, for other admins who are not aware this WP:LTA--DBigXray 10:01, 11 February 2019 (UTC)
DBigXray, Absolutely. - Fylindfotberserk (talk) 10:05, 11 February 2019 (UTC)

The key to it, is that the community is becoming more aware. GoodDay (talk) 13:30, 11 February 2019 (UTC)

GoodDay you should also report his IP (with a link to this discussion) at WP:AIV and request page protection, whenever you see him. --DBigXray 13:36, 11 February 2019 (UTC)
I just may. GoodDay (talk) 13:49, 11 February 2019 (UTC)
Requested PP for few articles today. - Fylindfotberserk (talk) 12:14, 12 February 2019 (UTC)
Started Wikipedia:Long-term abuse/Bidhan Singh, please expand and update the page. --DBigXray 04:42, 16 February 2019 (UTC)
Inviting to expand and add on the LTA page above. @LiberatorG:, @Shellwood:, @General Ization:, @Cptmrmcmillan:, @Fylindfotberserk:, @GoodDay:, Zzuuzz, @Oshwah: --DBigXray 03:40, 17 February 2019 (UTC)
Cool. Ya'll usually got the rascal's IPs caught, while I'm away :) GoodDay (talk) 03:44, 17 February 2019 (UTC)
@DBigXray: Nice job sir. - Fylindfotberserk (talk) 09:29, 17 February 2019 (UTC)

You've got mailEdit

 
Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.Doug Weller talk 17:30, 22 January 2019 (UTC)

Vandal block requestEdit

Hi. An user with username Chow Mridu paban is involved in POV pushing and adding unsourced/manipulated content(unrelated reference links) in Magh Bihu even after repeated reverts. User trying to remove his name from this list. Kindly take action soon.157.47.190.33 (talk) 13:35, 23 January 2019 (UTC)

A barnstar for you!Edit

  The Anti-Vandalism Barnstar
Thank you for shutting this vandalism down. Criticalthinker (talk) 10:20, 26 January 2019 (UTC)
Thanks. Any time. -- zzuuzz (talk) 13:21, 26 January 2019 (UTC)

Checkuser's BarnstarEdit

  The Checkuser's Barnstar
I, the IP, hereby give you the Checkuser Barnstar; for your due diligence and tiring works (including behind the scenes) in Sockpuppet investigations, courage to come up and block frivolous yet dangerous proxies, besides, management of time not withstanding the overall service you have provided to Wikipedia. Thnx very much zzuuzz you are really great!!!182.58.172.35 (talk)
Thanks, you're welcome. -- zzuuzz (talk) 22:26, 27 January 2019 (UTC)

NoticeEdit

  There is currently a discussion at Wikipedia:Administrators' noticeboard/Incidents regarding an issue with which you may have been involved. The thread is Any CU interested in a new rabbit hole?. GABgab 21:43, 29 January 2019 (UTC)

PUBG vandalismEdit

I think the time has come to put random additions of the word "pubg" [2] to be added in edit filter list against vandalism. your thoughts ? (refer PUBG)

It's a new one on me. I think we have a fortnite-type filter somewhere. Is it common though? -- zzuuzz (talk) 10:03, 30 January 2019 (UTC)
Not as common as Fortnite, AFAIK. Kids play Fortnite more than PUBG. Abelmoschus Esculentus (talkcontribs) 12:23, 30 January 2019 (UTC)
  • Zzuzz, from the pages I watch, I have reverted 3 such additions, I am sure that they aren't only happening on pages I watch. DBigXray 06:26, 10 February 2019 (UTC)
AE, please see List of best-selling video games#List#6 with 50 million sales. Never heard about Fortnite nor is it in the list.--DBigXray 06:26, 10 February 2019 (UTC)
@DBigXray: Well, Fortnite is released in 2017 and it's free. It was a meme as well. Abelmoschus Esculentus (talkcontribs) 06:34, 10 February 2019 (UTC)

Account was hackedEdit

Hi, I'm CaptainDanger25, I'm the user that reported the Sim12 accounts. The user you blocked Benedictfoos2 hacked my account just right now. He changed the password under MediaWiki and now I can't log back in. He was a user I had issues with years ago. I was wondering if you try to get it back under my control. Thanks! --2605:6000:A507:A300:59AA:B37C:7C87:D6EC (talk) 03:38, 10 February 2019 (UTC)

Never mind I figured it out. Thanks anyway! --CaptainDanger25 (talk) 04:02, 10 February 2019 (UTC)

@CaptainDanger25: OK, drop me a line if there's any further trouble. I can't recover an account for you, but I can check it and block it, so we repeat the process you've already been through. Please make sure you have a strong unique password, which you can remember. See Wikipedia:User account security. -- zzuuzz (talk) 10:10, 10 February 2019 (UTC)
@Zzuuzz: I'll remember that next time, Thanks a lot. --CaptainDanger25 (talk) 16:10, 10 February 2019 (UTC)

phewEdit

thought no one was going to turn up on that one - thank you JarrahTree 00:30, 14 February 2019 (UTC)

You're welcome. -- zzuuzz (talk) 00:50, 14 February 2019 (UTC)

Blogspot spamEdit

I see you've blocked multiple blogspot spammers this morning; an account was just blocked for repeated addition of this link; not sure if it should be blacklisted also. Home Lander (talk) 18:42, 17 February 2019 (UTC)

I'll generally reserve blacklisting for sites which are repeatedly spammed. Not sure that's the case here. Also, different MO to the rest of today's spammers. -- zzuuzz (talk) 19:54, 17 February 2019 (UTC)

NBA RefEdit

If NBA Referees1 is a LTA, would User talk:NBA Referees be as well? 331dot (talk) 20:38, 20 February 2019 (UTC)

Unrelated. It's a typical joe-job from Nsmutte. -- zzuuzz (talk) 20:38, 20 February 2019 (UTC)
Ah. Makes sense. Thanks for the clarification. 331dot (talk) 20:46, 20 February 2019 (UTC)

Probable sockEdit

Hello. My Evlekis-detector started buzzing when Konigboom (talk • contribs • deleted contribs • nuke contribs • logs • filter log • block user • block log) reverted a recent edit of mine, and I saw their contributions so far. Not 100% sure yet, though. Cheers, - Tom | Thomas.W talk 14:40, 24 February 2019 (UTC)

I don't think so. All things are possible, but I don't think so. -- zzuuzz (talk) 16:14, 24 February 2019 (UTC)
You could compare it to Special:Contributions/Hick Hick. I got the exact same vibes when this account showed up last summer, and kept an eye on it for a while, but then it stopped editing, only to resurface several months later, and get CU-blocked by Ponyo. - Tom | Thomas.W talk 19:39, 24 February 2019 (UTC)

A cup of tea for you!Edit

  Hope this helps heal your blocking finger which is surely getting a workout today! HickoryOughtShirt?4 (talk) 22:47, 24 February 2019 (UTC)

Invitation to User surevey 1Edit

Hello! There is an ongoing survey going on at User:ImmortalWizard/User survey 1. As a fellow Wikipedian ImmortalWizard would like you to answer some questions. It wouldn't take too long, and your participation will be appreciated. Thanks, THE NEW ImmortalWizard(chat) 16:59, 26 February 2019 (UTC)

NickBubbleBuddyEdit

I see that you blocked NickBubbleBuddy as a sock of Simulation12. That editor nominated Last Man Standing (season 7) for deletion and the article is currently at AfD. Should that AfD be closed? It's at Wikipedia:Articles for deletion/Last Man Standing (season 7). --AussieLegend () 14:16, 27 February 2019 (UTC)

Rollback requestEdit

Hi zzuuzz, I'd like to request rollback privileges. Initially thought I could manage without it, but have recently dealt with two instances that made me reconsider.

1) The first is described on this talk page thread I started today. An IP user made 3 consecutive edits, and in the first edit (Edit #1), they inserted (what I suspect was intentionally) incorrect info. In order to revert Edit #1, I had to revert Edits #2 and 3, which they quickly reverted before I could revert Edit #1. Rollback would've allowed me to just directly roll back all 3.
2) The second was clearly vandalism, in 2 parts. Edit #1 inserted vandalism in one part of the article; Edit #2 moved the reworded vandalism to a different spot in the article. When I reverted Edit #2, it rolled back to Edit #1, which ALSO contained the vandalism, and made it look like I was the one who added it. I quickly undid Edit #1, but the rollback tool would've prevented this problem.

In any case, if granted the rollback privilege, I will definitely use it carefully and sparingly per the rollback guidelines; I also noticed there were confirmation scripts available, as well as a way to add edit summaries--both would be quite useful.

Thanks! Big universe (talk) 04:49, 16 March 2019 (UTC)

Hi zzuuzz, forgot to leave a message here yesterday--I ended up enabling TWINKLE, and it's the better option for me, so thanks a lot for the suggestion. I posted a reply to your post anyway, in case you had time to read it. It is a bit long (didn't have enough time to trim it down more), but I hope it contains satisfactory answers to your questions/concerns. Thanks again for your time and help! Big universe (talk) 03:20, 20 March 2019 (UTC)

Concern for granting permissionEdit

Hello sir, I'm a active user of Wikipedia. And I have requested for permission for helping Wikipedia for a safer place and help fellow Wikipedian's. If you feel I need more practice though, I'll be happy to gain more experience. So, I would like to grab your attention. Im extremely sorry if I words are rude towards you sir. Thank you for taking the time to review my case, and have a nice day! AR.Dmg (talk) 12:22, 23 March 2019 (UTC)

User talk:Yeet9999999Edit

remove TPA? --Thegooduser Life Begins With a Smile :) 🍁 22:03, 23 March 2019 (UTC)

General philosophy: RBI. -- zzuuzz (talk) 22:05, 23 March 2019 (UTC)
Ok, Got it. Just like WP:DENY. --Thegooduser Life Begins With a Smile :) 🍁 22:07, 23 March 2019 (UTC)
Hi Zzuuzz. Since they are continually adding a protection template to a page that is not protected removal of TPA would keep the page from showing up in the Category:Wikipedia pages with incorrect protection templates. They might get bored and stop eventually though :-) MarnetteD|Talk 22:24, 23 March 2019 (UTC)

ygmEdit

 
Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.

TonyBallioni (talk) 03:12, 24 March 2019 (UTC)

Chuck SchumerEdit

Thank you--that account was evading a block. Would you mind increasing the protection for that article? JNW (talk) 20:56, 24 March 2019 (UTC)

  • Thanks, JNW (talk) 21:14, 24 March 2019 (UTC)

Recent :)Edit

Oops! ——SerialNumber54129 09:29, 27 March 2019 (UTC)

Definitely not the first! -- zzuuzz (talk) 09:33, 27 March 2019 (UTC)
Thanks very much! ——SerialNumber54129 09:37, 27 March 2019 (UTC)

infodudeUKEdit

I see you deleted content I uploaded, can it not be used freely for commentary?

  • Do you not understand what "copyright" means? Drmies (talk) 19:17, 30 March 2019 (UTC)
  • @InfodudeUK: But you are not commenting on the image - frankly that will be a bit difficult to accomplish - and, with the Brexit image at least, there is already a free alternative available. You might also want to read WP:NFCC in particular. -- zzuuzz (talk) 19:19, 30 March 2019 (UTC)

@Zzuuzz the free alternative is now out of date with Brexit having not happened on March 29th, my revision corrects to April 12th the timeline. — Preceding unsigned comment added by InfodudeUK (talkcontribs) 19:23, 30 March 2019 (UTC)

@InfodudeUK: You are welcome to write some text, or create a new image, or update the existing image, though obviously nothing too similar to the BBC image. Sorry but we take copyright very seriously around here. There simply not enough justification here to just nick someone else's work (and claim it as your own). You should really read that page. -- zzuuzz (talk) 19:27, 30 March 2019 (UTC)

@Zzuuzz Very well then, I'll set about creating my own image. — Preceding unsigned comment added by InfodudeUK (talkcontribs) 19:29, 30 March 2019 (UTC)

Another sockEdit

Here's another sock of 2603:3023:169:C000:902C:27DA:A5F0:6F56 (talk · contribs · deleted contribs · filter log · WHOIS · RBLs · http · block user · block log): 206.188.62.113 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), based on Special:Diff/891433425, a repeat of Special:Diff/890107316. —[AlanM1(talk)]— 02:08, 8 April 2019 (UTC)

Thanks. For the record, that's Wikipedia:Sockpuppet investigations/DeepNikita. -- zzuuzz (talk) 06:22, 8 April 2019 (UTC)

A thanks + An askEdit

Hi,

Thanks for blocking that IP I reported. As you included yourself in Category:Wikipedia_administrators_willing_to_grant_rollback_requests, I just wanted to let you know that WP:PERM/R has been sitting just below the backlog threshold for a couple of days (for reasons entirely unrelated to the fact that I'm on that request list). If you have a moment to consider those requests, it would be much appreciated.

Best, Mdaniels5757 (talk) 17:34, 13 April 2019 (UTC)

Those school IPsEdit

Moving this here since it’s really a different discussion, but thanks for pointing them out. I looked at the OTRS ticket and there was nothing particularly sensitive going on there, and over a decade the ownership of the IPs may have changed/whatever students were in the supposed school are now at the very least no longer there/not in school at all given the passage of time. TonyBallioni (talk) 15:34, 19 April 2019 (UTC)

Then thanks for reviewing and unblocking them, though I would say that it's the staff and not the students that matter, and whether the same staff is still there and what they might have been promised (wiki policy aside). The staff obviously realised that it's no use stopping particular students and that kids will always be kids and that the spew will always continue. Hopefully their firewall investment has improved in the last decade. -- zzuuzz (talk) 15:46, 19 April 2019 (UTC)

Thank youEdit

You're fast![3] Bishonen | talk 20:44, 21 April 2019 (UTC).

#Metoo listed at Redirects for discussionEdit

An editor has asked for a discussion to address the redirect #Metoo. Since you had some involvement with the #Metoo redirect, you might want to participate in the redirect discussion if you wish to do so. UnitedStatesian (talk) 02:44, 26 April 2019 (UTC)

User talk:CrayfordBoiEdit

You may wish to revoke talk page access.--Cahk (talk) 09:13, 26 April 2019 (UTC)

Request for unprotection of Tony AttwoodEdit

Only one person was vandalizing this article a few years ago https://en.wikipedia.org/wiki/Tony_Attwood Ylevental (talk) 19:31, 26 April 2019 (UTC)

OK. I'll put on some pending changes for a while. -- zzuuzz (talk) 19:43, 26 April 2019 (UTC)

User:Time Warp TickersEdit

Hello, could the above user be Wikipedia:Long-term abuse/JarlaxleArtemis? JACKINTHEBOXTALK 07:49, 28 April 2019 (UTC)

Or perhaps User:TryToBeFunny. I thought as you are a Checkuser, you might be able to find out. Anyway the user is now blocked. JACKINTHEBOXTALK 08:09, 28 April 2019 (UTC)
Indeed that's User:TryToBeFunny.[4] -- zzuuzz (talk) 08:49, 28 April 2019 (UTC)
Ah thanks. JACKINTHEBOXTALK 09:03, 28 April 2019 (UTC)

A FavorEdit

Would it be at all possible if I could ask you to block 140.0.160.175 (talk+ · tag · contribs · filter log · WHOIS · RBLs · block user · block log · cross-wiki contribs · checkuser (log))? It is one of several IPs used by an IP-hopping vandal that spams pages with poorly written, usually incorrect, often original research nonsense, or, alternatively, spams pages with inappropriate, nonexistent and or non-existent and inappropriate categories. It has become active again at this particular IP, and the only viable strategy I've found to deal with this vandal is to request that its current IP be blocked for a while so that all of its recent edits can be reverted as per WP:DENY (as searching through its many bad and unconstructive edits for its few good edits is a headache). Thank you for your time in hearing my request.--Mr Fink (talk) 04:17, 29 April 2019 (UTC)

(talk page watcher) Blocked (Extinct Species Vandal) — JJMC89(T·C) 04:51, 29 April 2019 (UTC)

SoftEther VPN#VPN GateEdit

If one of these is blocked, what duration do you suggest? Thanks, EdJohnston (talk) 18:12, 2 May 2019 (UTC)

I'd say a lot of the time you can probably rely on your own usual non-proxy block length algorithm. Most are gone within a few days, so a month won't usually hurt anyone. Three probably won't hurt much either. If they've been blocked before it's probably a different matter - blocked in the last year, maybe block for a year? -- zzuuzz (talk) 18:56, 2 May 2019 (UTC)

ArbCom 2019 special circularEdit

 
Administrators must secure their accounts

The Arbitration Committee may require a new RfA if your account is compromised.

View additional information

This message was sent to all administrators following a recent motion. Thank you for your attention. For the Arbitration Committee, Cameron11598 03:02, 4 May 2019 (UTC)


Administrator account security (Correction to Arbcom 2019 special circular)Edit

ArbCom would like to apologise and correct our previous mass message in light of the response from the community.

Since November 2018, six administrator accounts have been compromised and temporarily desysopped. In an effort to help improve account security, our intention was to remind administrators of existing policies on account security — that they are required to "have strong passwords and follow appropriate personal security practices." We have updated our procedures to ensure that we enforce these policies more strictly in the future. The policies themselves have not changed. In particular, two-factor authentication remains an optional means of adding extra security to your account. The choice not to enable 2FA will not be considered when deciding to restore sysop privileges to administrator accounts that were compromised.

We are sorry for the wording of our previous message, which did not accurately convey this, and deeply regret the tone in which it was delivered.

For the Arbitration Committee, -Cameron11598 21:04, 4 May 2019 (UTC)


Talk:Tony Mills (musician)Edit

Moved from Special:Diff/895636479

Zzuuzz, could you kindly ask Mr. Docker not to edit my talk entries? He's made the odd allegation that it is an "unwarranted reference to his wife," when. in fact, it refers to a someone who was editing under that name. I'm done editing here, but it's the principle of the matter, as there is nothing violative that I can think of. Thanks. Mystic Technocrat (talk) 16:07, 5 May 2019 (UTC)

@Mystic Technocrat and D. R. Docker: Since User:Janthana was editing and being referred to, there is no problem referring to this user. Thanks. -- zzuuzz (talk) 16:32, 5 May 2019 (UTC)

RajeshbieeeEdit

Hi Z, Rajeshbieee is requesting an unblock. There is a history of sockpuppetry, but with a cursory understanding of his case, I think he might have screwed up early on and may now have a legitimate interest in contributing constructively. He's invoking the Standard Offer and has willingly agreed to a CU colonoscopy here. Would you be willing to do the messy work? Thank you in advance, Cyphoidbomb (talk) 04:49, 6 May 2019 (UTC)

"That impersonation LTA again"Edit

...is at it again, as you can see in my logs. Between heavy hitters such as you and DoRD, what can you do? Drmies (talk) 17:18, 9 May 2019 (UTC)

@Drmies:. Or see my log. I see there's quite some global log. Maybe the way forward. If not global we could go local. -- zzuuzz (talk) 20:21, 9 May 2019 (UTC)
Zzuuzz, I LOVE looking at your log, but I was more being chatty along the lines of "hey smart people put a stop to this", haha, because I saw y'all's names in the CU logs. You know, I still know way too little about the global thing and don't have much of an inclination to learn. Should I? What these stewards do seems so difficult, and even further removed from article writing... Drmies (talk) 00:13, 10 May 2019 (UTC)

HelloEdit

I am a new user. I have been undoing vandalism edits and reporting users, but i want to learn more about Wikipedia.

Do you know if there is an article about Wikipedia policy?

Thanks. 186.11.3.51 (talk) 22:30, 9 May 2019 (UTC)

Hello. How about WP:SOCK? -- zzuuzz (talk) 22:40, 9 May 2019 (UTC)
OK that was hilarious. Drmies (talk) 00:18, 10 May 2019 (UTC)

Cell phone spammerEdit

After some peace and quiet, the Indian university cellphone spammer dropped another one: 9540098653 [5]. Maybe you can add to filter as opportunity arises. Cheers --Elmidae (talk · contribs) 16:47, 11 May 2019 (UTC)

  Done. Yup the filter's been blocking some more of this stuff recently. -- zzuuzz (talk) 14:30, 12 May 2019 (UTC)
'nother one please: 9470493850 [6]. Cheers --Elmidae (talk · contribs) 18:36, 24 May 2019 (UTC)
Three different numbers from that IP. Done. -- zzuuzz (talk) 19:27, 24 May 2019 (UTC)
One more, obfuscated: 987l3648l5 (using l's) [7]. Cheers --Elmidae (talk · contribs) 13:30, 27 May 2019 (UTC)
Another one (must be enrolment season...): O987l36 4815@ [8] --Elmidae (talk · contribs) 21:57, 27 May 2019 (UTC)
Another one: 8447424471 [9] --Elmidae (talk · contribs) 14:27, 28 May 2019 (UTC)
And another one (may have already been added by Widr): 987l364&l5 [10] --Elmidae (talk · contribs) 14:30, 28 May 2019 (UTC)
Another one: 844742447one [11] --Elmidae (talk · contribs) 16:03, 4 June 2019 (UTC)
I think we're mostly up to date, as there are some variations of that number in the filter. The spammer is hitting what I'll dub the 'useless nonsense limit', where they have to mangle stuff so much to avoid the filter that it becomes useless nonsense. Have some PC instead, this time. -- zzuuzz (talk) 18:16, 4 June 2019 (UTC)

CUEdit

Hi. Onurkd is a new account that is showing good abilities to make edits that require experience such as uploading pics and very good skills with reference templates. Seraphim System and her confirmed socks had a habit of typing their edit summaries before the auto-generated text ([12][13][14][15][16][17]). The same thing is being done by Onurkd. Onurkd till now has edited only articles of the main topic edited by Seraphim System and her socks (Ottoman and Turkish history). Can you check the accounts to see whether they are linked or not? Ktrimi991 (talk) 17:19, 16 May 2019 (UTC)

I'm not exactly saying it's unlikely, but the evidence doesn't match up. -- zzuuzz (talk) 20:22, 16 May 2019 (UTC)
Thanks for the CU. I am glad Onurkd is innocent and will continue to contribute. Thanks again. Cheers, Ktrimi991 (talk) 20:40, 16 May 2019 (UTC)

Thank you so much for good advice and kindness. Ktrimi991 , zzuuzz , Ktrimi991

Same person?Edit

Could AdhaBulliKutRamzaanMubarak (talk · contribs), ManasiAhujaSharma (talk · contribs) and RamzanMubarak (talk · contribs) be the same person? They both added and reverted the same content on Chhota Bheem Kung Fu Dhamaka. JACKINTHEBOXTALK 12:14, 21 May 2019 (UTC)

I'd say that's likely (usual disclaimers about meatpuppetry apply). The middle one is almost certainly Deepak Gauravnath (talk · contribs) and Sridhar reddy mca (talk · contribs). Hey you lot, stick to one account please. -- zzuuzz (talk) 13:00, 21 May 2019 (UTC)

Blocked user?Edit

Userpage of Malayalammojo contains suspicious descriptions. New account, but sounds like not a beginner user, especially the last sentence seems like the user was involved in arguments before and got blocked. Is the user calling the administrators an *******? 2405:204:D38A:CA0B:7D0F:C514:A118:5A35 (talk) 14:12, 22 May 2019 (UTC)

Wikipedia:Sockpuppet investigations/Lechuzaj and Wikipedia:Sockpuppet investigations/Mhdsuhail111. -- zzuuzz (talk) 15:45, 22 May 2019 (UTC)

Attack pages on WikiaEdit

On several Wikia sites, I've noticed several disgusting attack pages directed towards you (such as [18] & [19]). Should we take these as potentially serious threats or just abominable trolling? Are these necessary to report, in your opinion? I am curious to know who's behind this trolling. 12.217.229.162 (talk) 16:31, 25 May 2019 (UTC)

Hello, yes there's a few of those, and TBH it's nothing particularly new. This time (as usual) it's a troll in America who is banned here for doing vandalism and making threats. I take it about as seriously as a flying turd. I've never figured out the correct place to report abuse there. Maybe you or someone else would know? -- zzuuzz (talk) 16:41, 25 May 2019 (UTC)

Check userEdit

This one was blocked (for persistent unsourced editing) before I could file an SPI that come under this group. This is likely a follow up sock after Vaishakh bahu bali. Vandalising the financials in selected pages and the same "Tags: Mobile edit, Mobile web edit, Visual edit". Could you please perform a check to confirm it is the same guy. So this account can also be used as a reference in identifying the behaviour in future cases. Continental Rift (talk) 19:14, 29 May 2019 (UTC)

It's inconclusive. Also, regarding your own edits, see WP:LOGOUT. -- zzuuzz (talk) 20:38, 29 May 2019 (UTC)

You've got mailEdit

 
Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.TheSandDoctor Talk 13:24, 30 May 2019 (UTC)

Can you escapeEdit

Hi zzuuzz, I haven’t looked since the initial check, but Bsadowski1 pinged me in -checkuser IRC about them because of other issues. I’m assuming you found more accounts on different ranges than I checked, but we were both curious as to who the original master was. Courtesy ping to Ruslik0 since he seems to be running point on meta. Probably relevant since they apparently want to run for +sysop again immediately... TonyBallioni (talk) 22:36, 2 June 2019 (UTC)

@TonyBallioni: Yup, I would say note the checks I did - several accounts (most locked and some noted elsewhere), and a good rummage around various xwiki logs and deleted edits. And I CU-blocked VoltageP. But I don't know any such sockmaster. There were a few blocks on simplewiki, IIRC, but the answer probably lies somewhere between rowiki and wikidata. -- zzuuzz (talk) 23:44, 2 June 2019 (UTC)
They may be related to User:Praxdicae, User:QwertyUyr, User:LVHSer, User:Breaker0987 and some other accounts. At least they registered from the same range. Ruslik_Zero 19:09, 3 June 2019 (UTC)
@TonyBallioni: After looking over the accounts (and what you said above about the LTA wanting to "run for +sysop again immediately"), my conclusion is that this is Wonderfool, who is probably better known as Robdurbar here on en.wiki. This guy managed to trick the en.wiktionary admins into granting him adminship 5 times on that site. From what I can tell, he's been doing this for years, and when he's not trolling & making a mess on the admin-related pages here, it seems that he's trying to build up trust via a "good hand" sock to make another run at adminship again (one of his socks on en.wiktionary even claimed that someday, he would "find a way back in"). This person appears to be very familiar with CheckUsers and sysops in general, and he even claims to be an ex-SPI Clerk. (Though from his activities, he may have been a CU, though I can't really tell.) He's still making a mess cross-wiki, mostly here and on en.wiktionary. He never seems to stop for long. LightandDark2000 🌀 (talk) 06:19, 4 June 2019 (UTC)

Carl BenjaminEdit

Hello. The reason this article was set for WP:PC was so that anonymous users would not change the WP:BIOLEAD counter to the discussion on the talk page. This edit should not have been approved, but it made it into accepted when you approved the subsequent edit. --SVTCobra (talk) 11:39, 6 June 2019 (UTC)

Hello. I'll consider that going forward, however, whether the edit should remain (which it currently does) is a different question to whether the pending edit should have been approved. If you don't like it (and I can see why you might not) then simply undo it. In terms of PC approval it did not violate any policies and you could even say that the consensus, and history, about this particular change is weak at best. PC is not a good tool for content disputes of this sort. Attempting to hold a lede in stasis with PC is almost certainly going to fail. -- zzuuzz (talk) 15:14, 6 June 2019 (UTC)

RevDel ContentEdit

On WP:ANI, you Revision Deleted one of my edits as "purely disruptive material". I do not believe my edits were disruptive in any way whatsoever. Would you mind explaining the deletion?

The revision deletion policy states the following:

Grossly insulting, degrading, or offensive material that has little or no encyclopedic or project value and/or violates our biographies of living people policy. This includes slurs, smears, and grossly offensive material of little or no encyclopedic value, but not mere factual statements, and not "ordinary" incivility, personal attacks or conduct accusations.

Again, I don't believe my edits matched any of the criterion listed in the policy. EggRoll97 (talk) 16:56, 19 June 2019 (UTC)

Hello EggRoll97. Actually, no. I've only revdel'd one ANI revision recently, just after 4pm on 29 May, so let's go into that. The edit was by 182.19.154.231, which was being used by one of our regular LTAs - Jaredgk2008. I assume it was disruptively offensive as per usual. I assume that, because actually I can no longer see what it said. You can probably guess this from the page history and logs: I only deleted one single revision, whereas it fell in the middle of a series of about 1,500 edits between 21 May and 30 May were all since oversighted. I won't speculate about the reasons - oversight don't normally do something like that without good reason, but I can probably point in the direction of some places to query it if you have reason to doubt. The main point I'd like you to take away about this stuff when it happens: if a revision has been deleted then it was deleted because the page contained something deletable. It doesn't mean that you added it. -- zzuuzz (talk) 18:45, 19 June 2019 (UTC)

Sorry for the pre-emptive taggingEdit

Thanks for correcting my incorrect tagging of Joe-Job socks. Sasquatch t|c 21:41, 19 June 2019 (UTC)

No problem. There's a lot of joe-jobbing going on. -- zzuuzz (talk) 21:45, 19 June 2019 (UTC)

ARVEdit

What you are saying is that I was wrong to fight vandalism that was happening realtime while I was addressing it. You are ignoring my view of the incidents and defending someone who was deliberately breaching BLP. Perhaps you would prefer me to ignore vandals in future? After all, I would much rather write articles than be a policeman. Why do I bother? No Great Shaker (talk) 00:09, 3 July 2019 (UTC)

Not in the slightest. I'm just saying, only say "they edited after warning", after they've edited after a warning. From my point of view, and probably theirs, you asked them to stop and they stopped, which is what we're after. -- zzuuzz (talk) 00:14, 3 July 2019 (UTC)

User:JC7V7DC5768Edit

Hii, This user is hard blocked by ArbCom (by you) 2 months ago, Can you remove their special user rights? Thanks! -- CptViraj (📧) 14:21, 3 July 2019 (UTC)

OK, done. For the record, although I am not on Arbcom, I do happen to be familiar with the particular circumstances behind this block. Also for the record, per WP:INDEFRIGHTS in general such rights are not permanent but there is often no hurry to remove them. Saying that, this one won't be needing those again. -- zzuuzz (talk) 15:40, 3 July 2019 (UTC)
Got it! Regards -- CptViraj (📧) 16:12, 3 July 2019 (UTC)

Wikinger socksEdit

re [20]: honestly, I can't quite figure out now what happened there. Obviously, the current Jampal abhrishek (talk · contribs) is Wikinger, as was the Jampal abhrishrek (talk · contribs) I got locked in January. At that time, I must have been seeing a different legitimate user under the "Jampal abhrishek" name somewhere, but I'm damned if I know how Wikinger now got hold of that account name too. Either I misspelled it at the time and the legitimate user is somewhere under yet a third similar spelling, or the legitimate user got renamed and Wikinger subsequently hijacked the name? Fut.Perf. 08:48, 4 July 2019 (UTC)

Ah, got it, the legitimate guy was Jampal abhishek (talk · contribs). One "r" less. Fut.Perf. 08:51, 4 July 2019 (UTC)
One less mystery in the multiverse. Thanks. -- zzuuzz (talk) 09:07, 4 July 2019 (UTC)

Proxy score of 65 from ipqualityscoreEdit

Hi Zzuuzz. Recently an editor filed a report at WP:AN3 from a London-based IP. (This was their only Wikipedia edit, and they were not a party to the dispute they were reporting). Ipqualityscore.com says it is a VPN, but only gives a score of '65 - suspicious'.

https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test/lookup/178.239.161.219

Would this justify any action? One rule that occurs to me is that socks should not participate in Wikipedia space. ("Undisclosed alternative accounts are not to be used in discussions internal to the project.") I am not aware of any general rule about editing from a VPN. Thanks, EdJohnston (talk) 15:40, 5 July 2019 (UTC)

Hi Ed. I'm not sure about a 65. VPNs are generally quite difficult to verify, but I'd also consider that IP suspicious. I've been away for a little while and I'm still catching up, but what I do know is that there's some sockpuppetry and trouble-making going on generally in that topic area, for example Newshunter14 (talk · contribs · block log) is technically likely/indistinguishable from the user you mentioned - whatever they were doing is probably related. So be suspicious and take things with a pinch of salt is what I'd say. -- zzuuzz (talk) 16:02, 5 July 2019 (UTC)
Also a slight chance of a joe-job. A while back, we had someone who was imitating the account names of people who were at WP:AN3 and then pretending to continue a war in which they were involved. (e.g. if XX12 is named in a report, they start to edit the article with the newly-created XX14, hoping to put a charge of socking on XX12). The IP and Newshunter14 might both be the identities of a joe-jobber trying to get Newshunter12 blocked. EdJohnston (talk) 19:07, 5 July 2019 (UTC)
Yup, that was my initial thought (also have a look at Newshunter12's recent user talk edits). There's a few of those joe-jobbers, but I'm not currently sure about the pattern. It might be a local problem, but I don't yet have the full background story. That topic area though - for some reason there's always problems of one sort or another lurking around. -- zzuuzz (talk) 19:55, 5 July 2019 (UTC)
I got a note on my talkpage about this. For whatever reason Newshunter12 (and to a lesser extent me and @Randykitty:) got a few ridiculous death threats 6 months ago, and it resurfaced a few weeks ago; see here for a quick refresher. There has historically been a problem with IPs promoting the GRG and trying to model our articles after their pages. Whoever this is clearly wants to get Newshunter12 in some sort of hot water, most likely because he's been at the forefront of a multi-year effort trying to remove gigantic reams of longevity trivia. The Blade of the Northern Lights (話して下さい) 00:10, 6 July 2019 (UTC)

Possible sock- or meatpuppets?Edit

Hi, these two users, Jooch A Schmidt and WillColemans, registered and made their first edits at around the same time, and they seem to edit at very similar times of day (plus very similar editing interests). Also, WillColemans created Jooch's talk page with a barnstar. Could they be sock- or meatpuppets? JACKINTHEBOXTALK 19:28, 9 July 2019 (UTC)

Also see this edit, in which Jooch refers to 'Will Coleman'. JACKINTHEBOXTALK 19:29, 9 July 2019 (UTC)
I'd say they're probably meatpuppets. I wouldn't be surprised if if one gets blocked they both get blocked. -- zzuuzz (talk) 20:25, 9 July 2019 (UTC)

JUST HOLD UP ONE MF'IN SCHMIDT.

MEATPUPPETS OR SOCK- YOU ASK? WELL LET ME TELL YOU, INTERNET POLICEMEN, WE ARE NEITHER. WE ARE PEOPLE BEHIND THIS KEYBOARD, BARN STARS OF TRUTH. JUSTICE.

YOU MAY KILL BLOCK ONE COLEMAN BUT THREE WILL RISE TO REPLACE ME.

-WILLCOLEMANS — Preceding unsigned comment added by WillColemans (talkcontribs) 20:51, 9 July 2019 (UTC)

Truth justice, eh? I'm sure that will go a long way. Have you considered contributing something constructive towards the encyclopaedia? -- zzuuzz (talk) 21:05, 9 July 2019 (UTC)

172.56.28.0/23Edit

Many thanks for blocking; it's of course your decision which I'll respect, but I thought I'd just beg to extend it a bit longer. —PaleoNeonate – 20:52, 9 July 2019 (UTC)

Yup, just getting a feel for things. I sense longer blocks coming. The paired range, btw, is 172.58.222.0/24. Also btw Newshunter12, all the above (Newshunter14 etc) is/was the same person. -- zzuuzz (talk) 21:00, 9 July 2019 (UTC)
Yes, the route would even be for CIDR 172.32.0.0/11 but that's quite large... Thanks, —PaleoNeonate – 21:05, 9 July 2019 (UTC)
Actually the 172.56 and 172.58 ranges are both very well known to most admins. Fortunately, they are segmented, to some extent, into even smaller blockable ranges like those I've blocked. -- zzuuzz (talk) 21:09, 9 July 2019 (UTC)
Thank you very much for this information and for all your efforts to combat this issue. I am also grateful you removed the latest vandalism from my talk page. Hopefully this person will find something better to do with their time then harrying me on Wikipedia. Newshunter12 (talk) 02:34, 10 July 2019 (UTC)
I just wanted to let you know that the same individual vandalized my talk page again, but the comment was removed and the editor blocked for one month by Ponyo. Newshunter12 (talk) 01:05, 11 July 2019 (UTC)

Bidhan Singh filterEdit

Heya! How do you feel about Special:AbuseFilter/test/997? It seems to match his recent behaviour (I'm tired of seeing new reports almost every day on AIV) -- Luk talk 15:11, 12 July 2019 (UTC)

Hi Luk. I feel your pain. I think I can speed it up - see what you think. Also, I think last time I looked we were dealing with some specific (quite large) IP ranges. Do you happen to have them? Going by the results so far it's going to be a busy filter otherwise. -- zzuuzz (talk) 15:41, 12 July 2019 (UTC)
I see the two ranges I was thinking of - one in particular - are listed at the LTA. What are your thoughts on that? -- zzuuzz (talk) 16:13, 12 July 2019 (UTC)
I remember of 2409:4064::/36 (talk · contribs · WHOIS) and 2409:4052:2000::/36 (talk · contribs · WHOIS), the last 2 ranges I acted on (I blocked a subnet) -- Luk talk 22:56, 12 July 2019 (UTC)
@Luk: So looking at the hits I think we're going to have to restrict it to those IP ranges being used. Sound OK? -- zzuuzz (talk) 09:24, 13 July 2019 (UTC)
It sounds more reasonable to me than my broad strokes that caught a few false positives! :) -- Luk talk 12:49, 13 July 2019 (UTC)

YGMEdit

Hi Zzuuzz. Please check your email. -- Marchjuly (talk) 07:31, 18 July 2019 (UTC)

Your block of 71.56.23.5Edit

Hey! I see you have blocked 71.56.23.5 for 6 months. According to What'sMyIPAdress, that IP is likely a dynamic IP. As such, this IP may be shared by a lot of users. Because this is a long term block, I suggest it can be useful to contact the organisation to whom the IP is registered (Comcast Cable). They have an email address registered in their IP registration: abuse comcast.net. That way, they can take action that would make this block of a dynamic IP unnecessary, preventing possibly many people from losing their ability to edit Wikipedia. Thanks, MrClog (talk) 00:22, 20 July 2019 (UTC)

While the IP is technically dynamic, it has very clearly been assigned to the same disruptive user for months. This IP address is almost certainly not shared with anybody outside the vandal's home network. Reaper Eternal (talk) 00:30, 20 July 2019 (UTC)
@Reaper Eternal: True, and it is probably a sticky dynamic IP. Would it be worth it tagging the IP's talk page with {{Dynamic IP}} in case the vandal's network modem is turned off long enough (for whatever reason) for their lease to end? --MrClog (talk) 00:39, 20 July 2019 (UTC)
What the Reaper said. Actually the vandal has also been using other IP addresses in the meantime, so make of that what you will. I personally see no need to add any tags. If you've ever seen any abuse complaint actually have any effect (or even get a reply), then you're probably in a minority. -- zzuuzz (talk) 00:58, 20 July 2019 (UTC)

Proxy sockEdit

Hi zzuuzz, could you maybe take a look at 198.57.27.196? It appears to be blocked User:Shingling334 (though I think not exclusively) on a GlobalTeleHost server proxy. I've already listed it (and several others of his) at WP:OP, but there's a backlog there. This one has been active for a while. Thanks... --IamNotU (talk) 01:03, 20 July 2019 (UTC)

Verified usersEdit

Hey, could you add me to the verified user list of WikiProject on open proxies? About that hotel IP thingy: I looked through my results again and couldn't find it for whatever reason. not even when searching for both the IP and "hotel". --MrClog (talk) 12:07, 21 July 2019 (UTC)

Hi. I'd be happy to help you along the path, but I'm a bit of a stickler for seeing some evidence and throwing some challenges, so for a start I'd like to see you edit with the latest proxy I blocked, and make an edit identical to this one I did a few minutes ago, using the same address. -- zzuuzz (talk) 12:35, 21 July 2019 (UTC)
Can you check that it is still open? It seems to be a HTTP proxy, but the only port nmap found, 113, is closed. Or did I miss something? Thanks, MrClog (talk) 13:18, 21 July 2019 (UTC)
It's definitely open. Hint: Don't use nmap, you won't need it. You will almost never need nmap. And if necessary, have another read of the previously linked guide. I'll add, to save you any hassle, that you won't need to download or install any software to use it. -- zzuuzz (talk) 13:43, 21 July 2019 (UTC)
I have tried all the usual things: Google results, rDNS, WHOIS, etc. Doesn't seem to be a web proxy, and I tried the various port numbers on the internet, but none worked. Am I missing something obvious here? --MrClog (talk) 13:58, 21 July 2019 (UTC)
Of course you are. No to be fair it's a fairly decent test of a fairly typical proxy one might encounter and the thinking required, and it's not too obvious for that reason. But it's not too hard. So let's start with the starting point, is port 80 open? Your nmap results seem to suggest not, but how about this? From there you should be coasting. -- zzuuzz (talk) 14:10, 21 July 2019 (UTC)
I tried that, but my browser (Microsoft Edge) says it "Can't reach this page". --MrClog (talk) 14:22, 21 July 2019 (UTC)
Oh, Microsoft Edge's 'friendly' error messages. You can Google that. I don't use it myself and I doubt any other browser would hide the real message. I guess that another browser might be a requirement (though telnet should get you the right error). Does anything happen to the URL? -- zzuuzz (talk) 14:30, 21 July 2019 (UTC)
I have downloaded Firefox, but no response it that browser either, nor any change in the URL. --MrClog (talk) 15:21, 21 July 2019 (UTC)
─────────────────I used Browserling to simulate Google Crome in Windows 7 and I did get a response there, which showed the following domain: www1.sitemix.jp. Can't access that website. --MrClog (talk) 15:40, 21 July 2019 (UTC)
OK, that's one way to do it. You're on the right path. Hint: What can you find out about this "sitemix.jp" in relation to this quest? -- zzuuzz (talk) 15:47, 21 July 2019 (UTC)
Ipqualityscore on on 157.250.156.30 says it is a 'high risk proxy connection'. I am nervous about using nmap so it's good to hear that it's not required. EdJohnston (talk) 16:05, 21 July 2019 (UTC)
A list of free proxies on the web offers http://aircon.sitemix.jp as a proxy for you to use. EdJohnston (talk) 16:13, 21 July 2019 (UTC)
@Zzuuzz: I was able to find various links of webproxies within the sitemix.jp domain, but none seemed active. This is an example of one, accessed via the Wayback Machine. Not sure how to actually access the proxy from this point. --MrClog (talk) 16:25, 21 July 2019 (UTC)
Never mind, I think I got it now. One sec. --MrClog (talk) 16:35, 21 July 2019 (UTC)
@Zzuuzz: I placed a messsage with the proxy. For whatever reason, both Edge and Firefox refused to load the website from which I could access the proxy. Used Browserling again. --MrClog (talk) 16:40, 21 July 2019 (UTC)
Good stuff, so we sort of got there eventually as a team. I think maybe you should have a think about this exercise. For example, why the nmap results? And how to overcome the port 80 issue you experienced. And why couldn't you use the proxy? And I will leave you an optional exercise: Telnet the IP at port 80, and issue a simple GET / HTTP request. When you've had some time to consider the results, and you're ready for round 2, or if I can help further, just say. -- zzuuzz (talk) 16:42, 21 July 2019 (UTC)
─────────────────I used the open <IP> 80 command in telnet, it wasn't able to connect. The GET/HTTP request did respond (status code 200), which indicates the website was active (it responded to a GET request). I'm not sure, but the fact that the telenet thingy didn't work might indicate that my laptop can't access open proxies for whatever reasons, while the domain did respond to a GET/HTTP request.
Regarding why I had to use Browserling: I don't think it has to do with my firewall, because my firewall is set to notify me if it blocks a certain domain. I'm not sure what is the reason, but I don't think it's an issue, because now that I know it, I can use Browserling in the future.
Regarding the nmap result, I believe it didn't show port 80 because the web server was ran by the server behind the www1.sitemix.jp domain, not the local machine. If any answers are wrong, please tell. If not, then I should be ready for round 2. --MrClog (talk) 20:38, 21 July 2019 (UTC)
If you can connect to the IP it's probably not a firewall issue, unless you have some sort of content filtering which wouldn't be helpful, and nmap would have no reason not to say it's not open on 80. So, to be clear the telnet session should go something like this: telnet <IP> 80 (you can also open telnet and issue the open command as you did); the server responds with some stuff including Connected to <IP>. Then you issue the command GET / HTTP/1.0 with two line breaks. The server responds with the content and you're on your way. This will probably need figuring out. And Firefox works for me, as they say. I doubt it would be a geolocation issue causing this difference. OK, let's try something less interesting. 205.204.67.189. Go. Make as many informations as you think is appropriate. -- zzuuzz (talk) 22:19, 21 July 2019 (UTC)
I go to WHOIS and find out that the IP is registered to eStruxture Data Centers Inc., a company that has 5 datacenters in Canada (found this on their website). Through Google Maps I found out that center MTL-1 matches the address to which the IP is registered. Because colocation services anonymise their users, it should be blocked. --MrClog (talk) 22:31, 21 July 2019 (UTC)
Not so fast. I'd refer your colo comments to the comments on Ninja's talk page. But that bit is easy - you can tell all that from the block log. I want proof, I want the access point. -- zzuuzz (talk) 22:36, 21 July 2019 (UTC)
I was able to use the proxy through http://proxy.luclapierre.com. Couldn't place a talk page message. --MrClog (talk) 22:43, 21 July 2019 (UTC)
I see 178.120.6.7 is listed at WP:OP. What are your thoughts on that? -- zzuuzz (talk) 23:07, 21 July 2019 (UTC)
I first tried HTTP (via Browserling), no response. I then Googled the IP, but wasn't able to find a host or a port number. Nmap didn't find anything either.   Unlikely that it is an open proxy. Based on the information I did find, it seems to be a regular dynamic IP from Beltelecom (Belarus). --MrClog (talk) 23:27, 21 July 2019 (UTC)
153.232.251.74? -- zzuuzz (talk) 23:51, 21 July 2019 (UTC)
─────────────────I am heading to bed now, will look at that one tomorrow if you don't mind. Should I close the 178.120.6.7 request (assuming I was correct) before I go? --MrClog (talk) 23:55, 21 July 2019 (UTC)
Return to the user page of "Zzuuzz".