Vermont

178.197.224.0/19 vandalism

Seems that a person at a couple of IP address edits (range 178.197.224.0/19) over a couple of days have been vandalising. I have blocked that range though it may be bigger, and looking at https://tools.wmflabs.org/guc/?isPrefixPattern=1&src=rc&user=178.197.2 it is also other wikis. :-( I will see if I can build an abusefilter to catch it. Billinghurst (talk) 10:16, 11 December 2018 (UTC)

Billinghurst, it looks like subtle vandalism to me; I don't recognize it as any specific LTA/user. It's been going for at least a month. (Nov 14, Dec 10) A global block would help, although from checking the GUC I'm noticing a lot of recent edits that aren't specifically vandalism. It may be a proxy. Thanks, Vermont (talk) 10:33, 11 December 2018 (UTC)

The person cited is user:Seewolf and I have left them a message at m:user talk:Seewolf asking whether we should write a GF to catch it. I have a vague memory that there has been low level, persistent vandalism and attacks. I tend to not commit to memory this stuff, so detail escapes me.

The range is, I believe without overly digging, a Swiss IP that can include domestic users, so will cover all sorts of edits. I have also asked whether any other range is known to be problematic. Billinghurst (talk) 12:32, 11 December 2018 (UTC)

Thanks. I’ll keep an eye out for this sort of vandalism. Vermont (talk) 13:18, 11 December 2018 (UTC)