Wikipedia:Abuse response/66.4.233.x
- The following page is an archived Abuse Response case. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report. No further edits should be made to this page. Click here to file a new report. See WP:ABUSE for more information.
66.4.233.x (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Abuse Response | |
---|---|
Report Status | |
IP Address | 66.4.233.x |
Contributions | Contributions |
Page Moves | Page moves |
Block Log | Block log |
Contribution History | Contribution history |
Status | Closed |
Requestor | Zach425 talk/contribs |
Date | 22:43, 29 August 2009 (UTC) |
Investigator | Avicennasis |
Contactor | Investigator |
Requester comments
There has been repeated and persistent vandalism from IP addresses in the 66.4.233.x range, which belongs to the State of Tennessee Department of Education. Having looked into 66.4.233.1 to 66.4.233.30, I found the following IP addresses to have committed recent vandalism (each talk page now contains a SharedIPEDU tag):
- 66.4.233.3 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.4 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.7 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.8 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.10 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.13 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.14 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.17 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.18 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.20 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.24 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.25 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.26 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.28 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.30 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.31 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.34 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.37 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.38 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.39 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.41 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.42 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.47 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
- 66.4.233.48 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
There may be additional ranges within 66.4.x.x that have similar problems, but I'm not knowledgeable enough about Wikipedia to check contributions for these by any method other than manual entry. --Zach425 talk/contribs 22:43, 29 August 2009 (UTC)[reply]
Discussion
Discussion
|
---|
No discussion posted. |
Registry information
- WHOIS report for 66.4.233.3
- WHOIS report for 66.4.233.4
- WHOIS report for 66.4.233.7
- WHOIS report for 66.4.233.8
- WHOIS report for 66.4.233.10
- WHOIS report for 66.4.233.13
- WHOIS report for 66.4.233.14
- WHOIS report for 66.4.233.17
- WHOIS report for 66.4.233.18
- WHOIS report for 66.4.233.20
- WHOIS report for 66.4.233.21
- WHOIS report for 66.4.233.24
- WHOIS report for 66.4.233.25
- WHOIS report for 66.4.233.26
- WHOIS report for 66.4.233.28
- WHOIS report for 66.4.233.30
- WHOIS report for 66.4.233.31
- WHOIS report for 66.4.233.34
- WHOIS report for 66.4.233.37
- WHOIS report for 66.4.233.38
- WHOIS report for 66.4.233.39
- WHOIS report for 66.4.233.41
- WHOIS report for 66.4.233.42
- WHOIS report for 66.4.233.47
- WHOIS report for 66.4.233.48
- Summarized WHOIS report (All the same}:
OrgName: State of Tennessee Department of Education OrgID: STDO Address: 710 James Robertson Parkway Address: 7th Floor City: Nashville StateProv: TN PostalCode: 37243 Country: US NetRange: 66.4.0.0 - 66.5.255.255 CIDR: 66.4.0.0/15 NetName: TEN-NASH-2BL NetHandle: NET-66-4-0-0-1 Parent: NET-66-0-0-0-0 NetType: Direct Assignment NameServer: NS3.TENNK12.NET NameServer: NS4.TENNK12.NET Comment: =20 RegDate: 2000-08-24 Updated: 2009-07-28 OrgAbuseHandle: CTI33-ARIN OrgAbuseName: Tillman Charles OrgAbusePhone: 1-615-401-4146 OrgAbuseEmail: ct3646@att.com OrgNOCHandle: CTI33-ARIN OrgNOCName: Tillman Charles OrgNOCPhone: 1-615-401-4146 OrgNOCEmail: ct3646@att.com OrgTechHandle: CTI33-ARIN OrgTechName: Tillman Charles OrgTechPhone: 1-615-401-4146 OrgTechEmail: ct3646@att.com ARIN WHOIS database last updated 2010-03-23 20: 00 Enter ? for additional hints on searching ARIN's WHOIS database. ARIN WHOIS data and services are subject to the Terms of Use available at https: //www.arin.net/whois_tou.html
Comprehensive edits analysis
- For a complete history & analysis of all of this IP's edits:
- click here for 66.4.233.3
- click here for 66.4.233.4
- click here for 66.4.233.7
- click here for 66.4.233.8
- click here for 66.4.233.10
- click here for 66.4.233.13
- click here for 66.4.233.14
- click here for 66.4.233.17
- click here for 66.4.233.18
- click here for 66.4.233.20
- click here for 66.4.233.21
- click here for 66.4.233.24
- click here for 66.4.233.25
- click here for 66.4.233.26
- click here for 66.4.233.28
- click here for 66.4.233.30
- click here for 66.4.233.31
- click here for 66.4.233.34
- click here for 66.4.233.37
- click here for 66.4.233.38
- click here for 66.4.233.39
- click here for 66.4.233.41
- click here for 66.4.233.42
- click here for 66.4.233.47
- click here for 66.4.233.48
Summary of edits No. of articles edited 604 No. of user pages edited 10 Average edits per day Sporadic Top time segment Mon-Fri, 1300 to 2000
Abuse analysis
Abuse analysis
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Abuse summary
Based on a random selection of articles, it seems like commonplace vandalism. There doesn't seem to be a goal or repeating theme at all. There is no political or social motivation other than simple disruption. The edits are childish. The pages are not linked in any easy to see way. It seems this individual is clicking on Random article and vandalizing whatever article they end up at. The WHOIS info comes back to a school system, and the edits for ALL of the IPs listed above almost always occur between 1300 - 2000, and almost always happen Mon-Fri. It seems like a students schedule, vandalizing during school hours (or perhaps after school in a computer lab or library.)
Modus Operandi
As above: It seems this individual is clicking on Random article and vandalizing whatever article they end up at.
Contact summary
Communication sent:
25 March 2010 |
Dear Sir or Madam:
On behalf of Wikipedia's Abuse Response Team, I am contacting you to inform you of an incident or incidents of abuse originating from your network. Wikipedia is a multilingual project to create a complete and accurate open content encyclopedia that can be used by anyone with Internet access free of charge. The English version may be viewed on the Web at http://en.wikipedia.org. A fundamental component of Wikipedia is that it may be edited by virtually anyone, as long as their edits benefit the goal of creating an encyclopedia. This approach has the downside that it exposes us to large scale vandalism, something that we are always trying to combat. We are able to achieve this by utilizing automated bots and tools to detect and revert unconstructive edits. If a user is identified as repeatedly abusing their privilege to edit Wikipedia, they are blocked, either temporarily or permanently. I have completed an investigation and discovered that a series of IP addresses which appear to be registered to your organization, the most recent of which is [66.4.233.28], has been habitually abusing Wikipedia by vandalizing articles at http://en.wikipedia.org. His or her actions are likely preventing other users on your network from contributing, as this and many other IP addresses have been blocked from editing Wikipedia on many multiple occasions, many of which blocks are ongoing. Multiple warnings have been issued over a long duration of time, asking the user to refrain from abusive use of Wikipedia. However, the user has chosen to ignore the warnings, and as a result has incurred several blocks to IP addresses under your jurisdiction. I am contacting you because this user continues to abuse Wikipedia after his or her block expires and because this user has been blocked five times or more, justifying a need for a report to your organization. The Wikipedia Community takes abuse of Wikipedia very seriously. The Wikipedia Abuse Response Team has completed a thorough investigation on this matter which includes a detailed log of activities conducted by the IP address in question. The server logs which includes timestamps of the activity should assist you in identifying the user responsible for abusing Wikipedia. The entire case is available for you to view at: http://en.wikipedia.org/wiki/Wikipedia:Abuse_reports/66.4.233.x Additional information regarding this users most recent contributions to Wikipedia may be found at: http://en.wikipedia.org/wiki/Special:Contributions/66.4.233.28 The block log for the most recent IP may be found at: http://en.wikipedia.org/w/index.php?title=Special:Log/block&page=User:66.4.233.28 In the future you may wish to monitor contributions made from this IP number at: (RSS & ATOM feeds) http://en.wikipedia.org/wiki/User_talk:66.4.233.28
|
---|---|
Reply received: | None yet. |
Case history | |
---|---|
Investigated by: | Avicennasis |
Contacted by: | Investigator, Netalarm sent second email on May 14, 2010. |
Closed on: | |
Disposition: | 01:42, 3 June 2010 (UTC)
|
Case log: | ![]() 12:26, 25 March 2010 (UTC) 04:42, 15 May 2010 (UTC) ![]() |
- The above page is an archived Abuse Response case and has been preserved for recording purposes. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report. No further edits should be made to this page.