Page MenuHomePhabricator

Blocked on English Wikipedia / Wikimedia thinks my IP is 10.80.1.11
Closed, ResolvedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • I try to edit enwiki while logged in

What happens?:
API response (which contains more details than the in-browser notice):

{"error":{"code":"blocked","info":"Your username or IP address has been blocked. The block was made by [[User:ST47ProxyBot|\u202aST47ProxyBot\u202c]]. The reason given is [[File:Banned proxys.svg|50px|left]]'''The [[IP address]] that you are currently using has been blocked because it is believed to be an [[Open proxy|open]] or [[Anonymizer|anonymizing]] proxy, such as a VPN service.''' To prevent abuse, [[Wikipedia:Open proxies|these proxies may be blocked]] from editing Wikipedia. If you are using an open proxy or VPN service, you will need to disable it or turn it off in order to edit Wikipedia. If you believe you are not using an anonymizing proxy, the most likely cause is that another customer using your IP address who was previously assigned this IP address was running an open proxy. You may [[Wikipedia:Appealing a block|appeal this block]] by adding the following text on your [[Help:Talk pages|talk page]]: \"{{[[Template:Unblock|unblock]]|reason=Caught by an open proxy block but this host or IP is not an open proxy. My IP address is _______. ''Place any further information here.'' ~~~~}}\". '''You must fill in the blank with your IP address for this block to be investigated.''' Your IP address can be determined '''[https://en.wikipedia.org/wiki/Wikipedia:Get_my_IP_address?withJS=MediaWiki:Get-my-ip.js here]'''. Alternatively, if you wish to keep your IP address private you can use the [[Wikipedia:Unblock Ticket Request System|unblock ticket request system]]. More rarely, your network equipment or that of your service provider may be misconfigured or compromised by malicious software (such as a virus). For more information, see the [[Wikipedia:WikiProject on open proxies|WikiProject on Open Proxies]]. '''Administrators:''' The [[WP:IP block exemption|IP block exemption]] user right should only be applied to allow users to edit using an open or anonymizing proxies in exceptional circumstances, and they should usually be directed to the functionaries team via email. If you intend to give the IPBE user right, a [[WP:CheckUser|CheckUser]] needs to take a look at the account. This can be requested most easily at [[Wikipedia:SPI#Quick CheckUser requests|SPI Quick Checkuser Requests]]. '''Unblocking''' an IP or IP range with this template '''is highly discouraged''' without at least contacting the blocking administrator. . *Start of block: 13:40, 22 August 2023 *Expiration of block: 13:40, 5 September 2023 *Intended blockee: 10.80.1.11 You can contact [[User:ST47ProxyBot|\u202aST47ProxyBot\u202c]] or another [[Wikipedia:Administrators|administrator]] to discuss the block. You can use the \"Email this user\" feature if a valid email address is specified in your [[Special:Preferences|preferences]] and you have not been blocked from using it. Your current IP address is 10.80.1.11. Block ID #21060642. Please include all above details in any queries you make.","blockinfo":{"blockid":21060642,"blockedby":"ST47ProxyBot","blockedbyid":37958503,"blockreason":"{{blocked proxy}} <!-- http://62.201.223.171:8186 --> ","blockedtimestamp":"2023-08-22T13:40:01Z","blockexpiry":"2023-09-05T13:40:01Z","blocknocreate":"","blockedtimestampformatted":"13:40, 22 August 2023","blockexpiryformatted":"13:40, 5 September 2023","blockexpiryrelative":"in 13 days"},"*":"See https://en.wikipedia.org/w/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at &lt;https://lists.wikimedia.org/postorius/lists/mediawiki-api-announce.lists.wikimedia.org/&gt; for notice of API deprecations and breaking changes."},"servedby":"mw1408"}

My IP is NOT 10.80.1.11 despite https://en.wikipedia.org/wiki/Wikipedia:Get_my_IP_address?withJS=MediaWiki:Get-my-ip.js claiming this. Whatismyip.com confirms what my router says, my IP starts with 84.

What should have happened instead?:
I shouldn't be blocked!

Other information (browser name/version, screenshots, etc.):
I have no idea what http://62.201.223.171:8186 is (according to geoip.com it's in Iraq?)

https://en.wikipedia.org/w/api.php?action=query&meta=userinfo&callback=&format=json&formatversion=2 and https://commons.wikimedia.org/w/api.php?action=query&meta=userinfo&callback=&format=json&formatversion=2 return

/**/({"batchcomplete":true,"query":{"userinfo":{"id":0,"name":"10.80.1.11","anon":true}}})

https://commons.wikimedia.beta.wmflabs.org/w/api.php?action=query&meta=userinfo&callback=&format=json&formatversion=2 returns

/**/({"batchcomplete":true,"query":{"userinfo":{"id":0,"name":"84.**censored my actual IP**","anon":true}}})

See also:

Event Timeline

I'm no longer blocked as on https://en.wikipedia.org/wiki/Special:Contributions/ST47ProxyBot this message can be read:

14:13, 22 August 2023 Yamla talk contribs blocked ST47ProxyBot talk contribs with an expiration time of indefinite (Bug: it's blocking 10.80.x.x IP addresses. Block can be lifted by anyone (including ST47) without consulting me)

Note: Multiple dewiki users were reporting a similar problem regarding the IP 10.80.1.7 which also doesn't belong to those users (same /28-range as 10.80.1.11)
https://de.wikipedia.org/w/index.php?title=Benutzer_Diskussion:XenonX3&oldid=236646961#Nutzersperre

https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/951508

@taavi has rolled this out so this should be resolving shortly. Thanks for filing the task.

Feel free to lift my block on https://en.wikipedia.org/w/index.php?title=Special:Log/block&page=User%3AST47ProxyBot once this fix is deployed and working. No need to consult me, as I note in the block log.

Change 951514 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] realm.pp: add comments about updating mediawiki-config

https://gerrit.wikimedia.org/r/951514

Change 951514 merged by Ssingh:

[operations/puppet@production] realm.pp: add comments about updating mediawiki-config

https://gerrit.wikimedia.org/r/951514

Note: Multiple dewiki users were reporting a similar problem regarding the IP 10.80.1.7 which also doesn't belong to those users (same /28-range as 10.80.1.11)
https://de.wikipedia.org/w/index.php?title=Benutzer_Diskussion:XenonX3&oldid=236646961#Nutzersperre

The problem was caused by a change in the esams IP range not being updated in the code correctly. "Esams" is the caching server cluster at EvoSwitch in Amsterdam, the Netherlands. (https://meta.wikimedia.org/wiki/Wikimedia_servers) Anyone using a German (or neighboring country) ISP would most likely connect through esams. Most users from America and Asia were likely not affected as their traffic goes through different caching server clusters.

Change 951591 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/mediawiki-config@master] wmf-config: remove public subnets from reverse-proxy.php

https://gerrit.wikimedia.org/r/951591

Change 951591 merged by jenkins-bot:

[operations/mediawiki-config@master] wmf-config: remove public subnets from reverse-proxy.php

https://gerrit.wikimedia.org/r/951591

Mentioned in SAL (#wikimedia-operations) [2023-08-30T12:43:34Z] <taavi@deploy1002> Started scap: Backport for [[gerrit:951591|wmf-config: remove public subnets from reverse-proxy.php (T344704 T329219)]]

Mentioned in SAL (#wikimedia-operations) [2023-08-30T12:46:50Z] <taavi@deploy1002> sukhe and taavi: Backport for [[gerrit:951591|wmf-config: remove public subnets from reverse-proxy.php (T344704 T329219)]] synced to the testservers mwdebug2002.codfw.wmnet, mwdebug1001.eqiad.wmnet, mwdebug1002.eqiad.wmnet, mwdebug2001.codfw.wmnet, and mw-debug kubernetes deployment (accessible via k8s-experimental XWD option)

Mentioned in SAL (#wikimedia-operations) [2023-08-30T12:55:02Z] <taavi@deploy1002> Finished scap: Backport for [[gerrit:951591|wmf-config: remove public subnets from reverse-proxy.php (T344704 T329219)]] (duration: 11m 28s)