Page MenuHomePhabricator

A global block does not work
Closed, InvalidPublic

Description

On 21 October 2018 I globally blocked 2A02:810D:443F:EFC2:4CF0:F06:EC03:DA04/64 range. However the accounts have been created despite this block.

Event Timeline

Ruslik0 created this task.Jan 19 2019, 8:09 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 19 2019, 8:09 PM
Ruslik0 renamed this task from A global block does work to A global block does not work.Jan 19 2019, 8:17 PM
Rxy added a subscriber: Rxy.
Rxy added a comment.Jan 19 2019, 8:41 PM

Pre checks

  1. is global block scope wiki -> Yes, dewiki
  2. the IP address is in local white list -> No, Isn't
  3. Is on globalblocks table -> Yes
MariaDB [dewiki_p]> SELECT * FROM global_block_whitelist;
+--------+------------------+--------+-------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+
| gbw_id | gbw_address      | gbw_by | gbw_by_text | gbw_reason                                                                                                                                                                    | gbw_expiry     |
+--------+------------------+--------+-------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+
|  44411 | 178.62.128.0/17  |  39066 | MBq         | unrelated user affected, https://de.wikipedia.org/w/index.php?title=Benutzerin_Diskussion:Itti&oldid=172020776#Hilfe_bei_Benutzersperre                                       | 20200402155812 |
|  48892 | 46.101.128.0/17  |  39066 | MBq         | complaint by de.wp user, see https://de.wikipedia.org/w/index.php?title=Wikipedia:Administratoren/Anfragen&oldid=172927912#meta_admin_blockiert_Telekomkunden_weitl%C3%A4ufig | 20200605213227 |
|  60621 | 185.125.168.0/22 |  39066 | MBq         | unrelated de.wp user, see https://de.wikipedia.org/w/index.php?title=Wikipedia:Administratoren/Anfragen&oldid=157595005#Global_gesperrte_IP-Adresse                           | 20210714185711 |
|  60625 | 139.59.0.0/16    |  39066 | MBq         | complaint by de.wp user, see https://de.wikipedia.org/w/index.php?title=Wikipedia:Administratoren/Anfragen&oldid=172927912                                                    | 20210714191251 |
|  61998 | 45.58.48.0/20    |  39066 | MBq         | as asked by unitymedia-customer. no vandalism de.wp                                                                                                                           | 20211016133650 |
| 101608 | 207.154.192.0/18 |  39066 | MBq         | benevolent user on dewp affected                                                                                                                                              | 20230120121330 |
| 119739 | 49.180.173.141   |  93464 | Ra'ike      | Testweise                                                                                                                                                                     | 20181227153010 |
+--------+------------------+--------+-------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+
7 rows in set (0.00 sec)


MariaDB [centralauth_p]> SELECT * FROM globalblocks WHERE gb_address= '2A02:810D:443F:EFC2:0:0:0:0/64';
+--------+--------------------------------+---------+------------+-----------------+----------------+--------------+----------------+-------------------------------------+-------------------------------------+
| gb_id  | gb_address                     | gb_by   | gb_by_wiki | gb_reason       | gb_timestamp   | gb_anon_only | gb_expiry      | gb_range_start                      | gb_range_end                        |
+--------+--------------------------------+---------+------------+-----------------+----------------+--------------+----------------+-------------------------------------+-------------------------------------+
| 118455 | 2A02:810D:443F:EFC2:0:0:0:0/64 | Ruslik0 | metawiki   | Long-term abuse | 20181021130805 |            1 | 20191021130804 | v6-2A02810D443FEFC20000000000000000 | v6-2A02810D443FEFC2FFFFFFFFFFFFFFFF |
+--------+--------------------------------+---------+------------+-----------------+----------------+--------------+----------------+-------------------------------------+-------------------------------------+
1 row in set (0.01 sec)

Were the accounts created anonymously (by nobody who's (G)IPBE)?

Rxy added a comment.EditedJan 20 2019, 3:36 AM

I can not reproduce that.

I tested following environment:

  1. Global block to single IPv4 address`116.58.171.38` -> works it as expectedly
  2. Global block to IPv4 range`116.58.171.38/31` -> works it as expectedly
  3. Global block to single IPv6 address 2001:2C0:DB07:3E00:894:38BB:DB13:517B -> works it as expectedly
  4. Global block to IPv6 address prefix 2001:2C0:DB07:3E00:0:0:0:0/64 -> works it as expectedly
MariaDB [centralauth_p]> SELECT * FROM globalblocks  WHERE gb_address = '2001:2C0:DB07:3E00:0:0:0:0/64';
+--------+-------------------------------+-------+------------+----------------------------------------------------------------+----------------+--------------+----------------+-------------------------------------+-------------------------------------+
| gb_id  | gb_address                    | gb_by | gb_by_wiki | gb_reason                                                      | gb_timestamp   | gb_anon_only | gb_expiry      | gb_range_start                      | gb_range_end                        |
+--------+-------------------------------+-------+------------+----------------------------------------------------------------+----------------+--------------+----------------+-------------------------------------+-------------------------------------+
| 123665 | 2001:2C0:DB07:3E00:0:0:0:0/64 | Rxy   | metawiki   | bug investigation [[phab:T214247]] / rxy's static IPv6 address | 20190120032656 |            1 | 20190120033656 | v6-200102C0DB073E000000000000000000 | v6-200102C0DB073E00FFFFFFFFFFFFFFFF |
+--------+-------------------------------+-------+------------+----------------------------------------------------------------+----------------+--------------+----------------+-------------------------------------+-------------------------------------+
1 row in set (0.00 sec)

Rxy, if you run checkuser on login wiki, you will see accounts created recently from 2A02:810D:443F:EFC2:4CF0:F06:EC03:DA04/64.

Rxy closed this task as Invalid.Jan 20 2019, 9:29 AM

Almost accounts are created by another account. and the global block is enabled an option "Block anonymous users only". It means account user is still can be creating an account. Also another account user is created by non global blocked IP address.