Maniphest T380710

Provide ip_reputation_risk_types variable in AbuseFilter
Closed, DuplicatePublic
Actions

Description

iPoid-Service provides a list of "risk types" associated with an IP address:

"UNKNOWN",
"CALLBACK_PROXY",
"GEO_MISMATCH",
"LOGIN_BRUTEFORCE",
"TUNNEL",
"WEB_SCRAPING"

To support the work in T380708: Migrate account creation blocking logic to AbuseFilter and provide more anti-abuse capabilities in AbuseFilter, we should create a protected variable for ip_reputation_risk_types.

Related Objects
Search...

		Status	Subtype	Assigned	Task
					Restricted Task
		Resolved		kostajh	T294511 2021 Security Team wikireplicas audit
		Declined		None	T284948 Raw IPs of logged-out users disclosed in wiki-replicas
		Resolved		Niharika	T324492 Temporary accounts - MVP
		Resolved		kostajh	T357776 [Epic] Mitigate abilities to abuse temporary accounts
		Stalled	Feature	None	T380917 Ability to configure a wiki to auto block open proxies
		Stalled		None	T166817 Globally block identifiable open proxies
		Resolved		Dreamy_Jazz	T354599 [EPIC] WE4.2.14b Provide IP reputation variables in AbuseFilter
		Duplicate		Dreamy_Jazz	T380710 Provide ip_reputation_risk_types variable in AbuseFilter
		Resolved		Dreamy_Jazz	T386913 IPReputation: Create a service to get IPoid data in IPReputation
		Resolved		Dreamy_Jazz	T380918 Provide capability to define new protected variables from other extensions
		Resolved		STran	T385687 Investigate: How should the AbuseFilter variable `user_unnamed_ip` be restricted

Event Timeline

kostajh created this task.Nov 25 2024, 9:43 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 25 2024, 9:43 AM

kostajh edited projects, added Trust and Safety Product Sprint (Sprint Tuba (Jan 20 - Feb 7)); removed Trust and Safety Product Sprint (Sprint Chimes (Dec. 9 - Jan. 17)).Jan 17 2025, 12:24 PM

kostajh edited projects, added Trust and Safety Product Sprint (Sprint Hurdy-Gurdy (Feb 10 - Feb 28)); removed Trust and Safety Product Sprint (Sprint Tuba (Jan 20 - Feb 7)).Feb 10 2025, 10:02 AM

Dreamy_Jazz added a subtask: T386913: IPReputation: Create a service to get IPoid data in IPReputation.Feb 20 2025, 12:05 PM

kostajh closed subtask T386913: IPReputation: Create a service to get IPoid data in IPReputation as Resolved.Feb 25 2025, 9:58 AM

Restricted Application added a project: Trust and Safety Product Team. · View Herald TranscriptFeb 25 2025, 9:58 AM

Dreamy_Jazz moved this task from Inbox to Engineering on the Trust and Safety Product Team board.Feb 28 2025, 6:00 PM

Dreamy_Jazz edited projects, added Trust and Safety Product Team (Engineering); removed Trust and Safety Product Team.

Dreamy_Jazz moved this task from Sprint Hurdy-Gurdy (Feb 10 - Feb 28) to Sprint Lemon Meringue (March 3 - 21) on the Trust and Safety Product Sprint board.Mar 4 2025, 11:54 AM

Dreamy_Jazz edited projects, added Trust and Safety Product Sprint (Sprint Lemon Meringue (March 3 - 21)); removed Trust and Safety Product Sprint (Sprint Hurdy-Gurdy (Feb 10 - Feb 28)).

Dreamy_Jazz added a subtask: T380918: Provide capability to define new protected variables from other extensions.Mar 7 2025, 5:30 PM

kostajh moved this task from Engineering to Engineering on the Trust and Safety Product Team board.Mar 10 2025, 12:44 PM

kostajh edited projects, added Trust and Safety Product Team; removed Trust and Safety Product Team (Engineering).

kostajh moved this task from Backlog to 2024-2025 Q3 on the WE4.2 Anti-abuse board.Mar 19 2025, 10:15 AM

Tchanders edited projects, added Trust and Safety Product Sprint (Sprint Chocolate Cake (March 24 - April 11)); removed Trust and Safety Product Sprint (Sprint Lemon Meringue (March 3 - 21)).Mar 24 2025, 2:19 PM

kostajh closed subtask T380918: Provide capability to define new protected variables from other extensions as Resolved.Mar 25 2025, 12:50 PM

Dreamy_Jazz claimed this task.Apr 1 2025, 8:37 PM

Dreamy_Jazz moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Chocolate Cake (March 24 - April 11)) board.

Change #1133248 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/IPReputation@master] [WIP] Add several IPReputation AbuseFilter variables

https://gerrit.wikimedia.org/r/1133248

gerritbot added a project: Patch-For-Review.Apr 1 2025, 9:32 PM

Dreamy_Jazz closed this task as a duplicate of T390874: IPReputation: Create the initial IPReputation AbuseFilter variables.Apr 2 2025, 2:18 PM

Dreamy_Jazz moved this task from In Progress to Done on the Trust and Safety Product Sprint (Sprint Chocolate Cake (March 24 - April 11)) board.Apr 4 2025, 11:09 AM