Use the global added in I6c11a6b9 to block ranges that we shouldn't be
seeing anonymous edits from.
Looking at anon edits from all the IP ranges in this patch to our public
wikis since 2015-01-01T00:00:00Z that haven't been deleted or had the
username revision-deleted, I see 160 edits from 127.0.0.1, one from a
Labs public IP on dawiki, and (not counting testwiki, test2wiki, or
testwikidatawiki which are used for CI) 10027 edits from 10.68.0.0/16.