Why
- Since ST47ProxyBot (userpage, block log) has stopped blocking open proxies on English Wikipedia, I assume the amount of LTA-related proxy vandalism and abuse has increased. In particular, I wonder if the MidAtlanticBaby LTA would be stopped if this bot were still running.
What
- Pick a MediaWiki extension (AutoModerator? TorBlock?) or create an extension to add the following functionality to:
- Config variable such as $wgBlockOpenProxies = true
- When set to true on a wiki, duplicates the functionality of ST47ProxyBot, which checked some kind of third party open proxy list, then blocked IP addresses for 14 days, 1 year, 2 years, or sometimes a different duration, depending on whether or not they were on that list, what type of proxy they were, and maybe an additional factor
- The algorithm appears to be "a combination of open-source intelligence, blocklist APIs, and port scanning/fingerprinting". (More details.)
- Alternatively: use AbuseFilter variables based on IP reputation data T354599: [EPIC] WE4.2.14b Provide IP reputation variables in AbuseFilter
Notes
- cc @Samwalton9-WMF and @kostajh, since this overlaps with some of your work (AutoModerator, IPInfo). cc @ST47, original bot maintainer.
- if we implemented this via a hook that stops the attempted action, we could avoid spamming the block log, which was a downside of ST47ProxyBot
- search keyword: VPNGate
