Wikipedia:Abuse response/66.4.233.x

{{ARA_top}}

{{ARStatus

|IP = 66.4.233.x

|status = Closed

|requestor = Zach425 talk/contribs

|date = 22:43, 29 August 2009 (UTC)

|Investigator = Avicennasis

|Contactor = Investigator

}}

__TOC__

'''Requester comments'''

There has been repeated and persistent vandalism from IP addresses in the 66.4.233.x range, which belongs to the State of Tennessee Department of Education. Having looked into 66.4.233.1 to 66.4.233.30, I found the following IP addresses to have committed recent vandalism (each talk page now contains a SharedIPEDU tag):

  • {{ipvandal|66.4.233.3}}
  • {{ipvandal|66.4.233.4}}
  • {{ipvandal|66.4.233.7}}
  • {{ipvandal|66.4.233.8}}
  • {{ipvandal|66.4.233.10}}
  • {{ipvandal|66.4.233.13}}
  • {{ipvandal|66.4.233.14}}
  • {{ipvandal|66.4.233.17}}
  • {{ipvandal|66.4.233.18}}
  • {{ipvandal|66.4.233.20}}
  • {{ipvandal|66.4.233.21}}
  • {{ipvandal|66.4.233.24}}
  • {{ipvandal|66.4.233.25}}
  • {{ipvandal|66.4.233.26}}
  • {{ipvandal|66.4.233.28}}
  • {{ipvandal|66.4.233.30}}
  • {{ipvandal|66.4.233.31}}
  • {{ipvandal|66.4.233.34}}
  • {{ipvandal|66.4.233.37}}
  • {{ipvandal|66.4.233.38}}
  • {{ipvandal|66.4.233.39}}
  • {{ipvandal|66.4.233.41}}
  • {{ipvandal|66.4.233.42}}
  • {{ipvandal|66.4.233.47}}
  • {{ipvandal|66.4.233.48}}

There may be additional ranges within 66.4.x.x that have similar problems, but I'm not knowledgeable enough about Wikipedia to check contributions for these by any method other than manual entry. --Zach425 talk/contribs 22:43, 29 August 2009 (UTC)

'''Discussion'''

{{collapse top|Discussion}}

No discussion posted.

{{collapse bottom}}

==Registry information==

  • [http://samspade.org/whois/66.4.233.3 WHOIS report for 66.4.233.3]
  • [http://samspade.org/whois/66.4.233.4 WHOIS report for 66.4.233.4]
  • [http://samspade.org/whois/66.4.233.7 WHOIS report for 66.4.233.7]
  • [http://samspade.org/whois/66.4.233.8 WHOIS report for 66.4.233.8]
  • [http://samspade.org/whois/66.4.233.10 WHOIS report for 66.4.233.10]
  • [http://samspade.org/whois/66.4.233.13 WHOIS report for 66.4.233.13]
  • [http://samspade.org/whois/66.4.233.14 WHOIS report for 66.4.233.14]
  • [http://samspade.org/whois/66.4.233.17 WHOIS report for 66.4.233.17]
  • [http://samspade.org/whois/66.4.233.18 WHOIS report for 66.4.233.18]
  • [http://samspade.org/whois/66.4.233.20 WHOIS report for 66.4.233.20]
  • [http://samspade.org/whois/66.4.233.21 WHOIS report for 66.4.233.21]
  • [http://samspade.org/whois/66.4.233.24 WHOIS report for 66.4.233.24]
  • [http://samspade.org/whois/66.4.233.25 WHOIS report for 66.4.233.25]
  • [http://samspade.org/whois/66.4.233.26 WHOIS report for 66.4.233.26]
  • [http://samspade.org/whois/66.4.233.28 WHOIS report for 66.4.233.28]
  • [http://samspade.org/whois/66.4.233.30 WHOIS report for 66.4.233.30]
  • [http://samspade.org/whois/66.4.233.31 WHOIS report for 66.4.233.31]
  • [http://samspade.org/whois/66.4.233.34 WHOIS report for 66.4.233.34]
  • [http://samspade.org/whois/66.4.233.37 WHOIS report for 66.4.233.37]
  • [http://samspade.org/whois/66.4.233.38 WHOIS report for 66.4.233.38]
  • [http://samspade.org/whois/66.4.233.39 WHOIS report for 66.4.233.39]
  • [http://samspade.org/whois/66.4.233.41 WHOIS report for 66.4.233.41]
  • [http://samspade.org/whois/66.4.233.42 WHOIS report for 66.4.233.42]
  • [http://samspade.org/whois/66.4.233.47 WHOIS report for 66.4.233.47]
  • [http://samspade.org/whois/66.4.233.48 WHOIS report for 66.4.233.48]
  • Summarized WHOIS report (All the same}:

OrgName: State of Tennessee Department of Education

OrgID: STDO

Address: 710 James Robertson Parkway

Address: 7th Floor

City: Nashville

StateProv: TN

PostalCode: 37243

Country: US

NetRange: 66.4.0.0 - 66.5.255.255

CIDR: 66.4.0.0/15

NetName: TEN-NASH-2BL

NetHandle: NET-66-4-0-0-1

Parent: NET-66-0-0-0-0

NetType: Direct Assignment

NameServer: NS3.TENNK12.NET

NameServer: NS4.TENNK12.NET

Comment: =20

RegDate: 2000-08-24

Updated: 2009-07-28

OrgAbuseHandle: CTI33-ARIN

OrgAbuseName: Tillman Charles

OrgAbusePhone: 1-615-401-4146

OrgAbuseEmail: ct3646@att.com

OrgNOCHandle: CTI33-ARIN

OrgNOCName: Tillman Charles

OrgNOCPhone: 1-615-401-4146

OrgNOCEmail: ct3646@att.com

OrgTechHandle: CTI33-ARIN

OrgTechName: Tillman Charles

OrgTechPhone: 1-615-401-4146

OrgTechEmail: ct3646@att.com

ARIN WHOIS database last updated 2010-03-23 20: 00

Enter ? for additional hints on searching ARIN's WHOIS database.

ARIN WHOIS data and services are subject to the Terms of Use

available at https: //www.arin.net/whois_tou.html

'''Comprehensive edits analysis'''

:For a complete history & analysis of all of this IP's edits:

  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.3 click here for 66.4.233.3]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.4 click here for 66.4.233.4]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.7 click here for 66.4.233.7]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.8 click here for 66.4.233.8]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.10 click here for 66.4.233.10]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.13 click here for 66.4.233.13]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.14 click here for 66.4.233.14]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.17 click here for 66.4.233.17]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.18 click here for 66.4.233.18]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.20 click here for 66.4.233.20]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.21 click here for 66.4.233.21]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.24 click here for 66.4.233.24]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.25 click here for 66.4.233.25]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.26 click here for 66.4.233.26]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.28 click here for 66.4.233.28]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.30 click here for 66.4.233.30]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.31 click here for 66.4.233.31]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.34 click here for 66.4.233.34]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.37 click here for 66.4.233.37]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.38 click here for 66.4.233.38]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.39 click here for 66.4.233.39]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.41 click here for 66.4.233.41]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.42 click here for 66.4.233.42]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.47 click here for 66.4.233.47]
  • [http://en.wikichecker.com/user/?l=all&t=66.4.233.48 click here for 66.4.233.48]

:

class="wikitable"

! colspan="2" | Summary of edits

width="200" | No. of articles edited

| 604

No. of user pages edited

| 10

Average edits per day

| Sporadic

Top time segment

| Mon-Fri, 1300 to 2000

'''Abuse analysis'''

{{collapse top|Abuse analysis}}

:Target Page or Category: Not entered

:

class="wikitable"

! Type of action

! Count

width="200" | No. of abusive edits (blatant)

| At least 195+

No. of warnings

| 195

No. of blocks

| 14

Other edits (non-blatant violations)

| Not entered

Blanked own userpage

| Not entered

:

class="wikitable" width="275"

! colspan="3" | Block history

No.

! Block date

! Block reason

1

| 18 March 2010

| Vandalism

2

| 18 February 2010

| Vandalism

3

| 7 December 2009

| Vandalism

4

| 4 December 2009

| Vandalism

5

| 11 August 2009

| Vandalism

6

| 15 May 2009

| Vandalism

7

| 30 April 2009

| Vandalism

8

| 24 April 2009

|Vandalism

9

| 31 March 2009

| Vandalism

10

| 23 March 2009

| Vandalism

11

| 14 January 2009

| Vandalism

12

| 1 December 2008

| Vandalism

13

| 18 November 2008

| Vandalism

14

| 3 November 2008

| Vandalism

{{collapse bottom}}

'''Abuse summary'''

[http://en.wikipedia.org/w/index.php?title=Cook_County_Jail&diff=prev&oldid=330676504 Based] [http://en.wikipedia.org/w/index.php?title=Sikhism&diff=prev&oldid=309080665 on] [http://en.wikipedia.org/w/index.php?title=Scramjet&diff=prev&oldid=276745157 a] [http://en.wikipedia.org/w/index.php?title=Page&diff=prev&oldid=251335999 random] [http://en.wikipedia.org/w/index.php?title=Dune&diff=prev&oldid=347317810 selection] [http://en.wikipedia.org/w/index.php?title=Frank_Norris&diff=prev&oldid=290107737 of] [http://en.wikipedia.org/w/index.php?title=Ferret&diff=prev&oldid=270284977 articles,] [http://en.wikipedia.org/w/index.php?title=Solon&diff=prev&oldid=276315267 it] [http://en.wikipedia.org/w/index.php?title=William_Bradford_(Plymouth_governor)&diff=prev&oldid=268036295 seems]

[http://en.wikipedia.org/w/index.php?title=Easter_Bunny&diff=prev&oldid=276315759 like] [http://en.wikipedia.org/w/index.php?title=Boys_Like_Girls&diff=prev&oldid=264103240 commonplace] [http://en.wikipedia.org/w/index.php?title=Virginia_Tech_massacre&diff=prev&oldid=341894155 vandalism.] There doesn't seem to be a goal or repeating theme at all. There is no political or social motivation other than simple disruption. The edits are childish. The pages are not linked in any easy to see way. It seems this individual is clicking on Random article and vandalizing whatever article they end up at. The WHOIS info comes back to a school system, and the edits for ALL of the IPs listed above almost always occur between 1300 - 2000, and almost always happen Mon-Fri. It seems like a students schedule, vandalizing during school hours (or perhaps after school in a computer lab or library.)

'''Modus Operandi'''

As above: It seems this individual is clicking on Random article and vandalizing whatever article they end up at.

'''Contact summary'''

{{ARContact|sent=Dear Sir or Madam:

On behalf of Wikipedia's Abuse Response Team, I am contacting you to inform you of an incident or incidents of abuse originating from your network.

Wikipedia is a multilingual project to create a complete and accurate open content encyclopedia that can be used by anyone with Internet access free of charge. The English version may be viewed on the Web at http://en.wikipedia.org. A fundamental component of Wikipedia is that it may be edited by virtually anyone, as long as their edits benefit the goal of creating an encyclopedia. This approach has the downside that it exposes us to large scale vandalism, something that we are always trying to combat. We are able to achieve this by utilizing automated bots and tools to detect and revert unconstructive edits. If a user is identified as repeatedly abusing their privilege to edit Wikipedia, they are blocked, either temporarily or permanently.

I have completed an investigation and discovered that a series of IP addresses which appear to be registered to your organization, the most recent of which is [66.4.233.28], has been habitually abusing Wikipedia by vandalizing articles at http://en.wikipedia.org. His or her actions are likely preventing other users on your network from contributing, as this and many other IP addresses have been blocked from editing Wikipedia on many multiple occasions, many of which blocks are ongoing. Multiple warnings have been issued over a long duration of time, asking the user to refrain from abusive use of Wikipedia. However, the user has chosen to ignore the warnings, and as a result has incurred several blocks to IP addresses under your jurisdiction. I am contacting you because this user continues to abuse Wikipedia after his or her block expires and because this user has been blocked five times or more, justifying a need for a report to your organization.

The Wikipedia Community takes abuse of Wikipedia very seriously. The Wikipedia Abuse Response Team has completed a thorough investigation on this matter which includes a detailed log of activities conducted by the IP address in question. The server logs which includes timestamps of the activity should assist you in identifying the user responsible for abusing Wikipedia. The entire case is available for you to view at:

http://en.wikipedia.org/wiki/Wikipedia:Abuse_reports/66.4.233.x

Additional information regarding this users most recent contributions to Wikipedia may be found at:

http://en.wikipedia.org/wiki/Special:Contributions/66.4.233.28

The block log for the most recent IP may be found at:

http://en.wikipedia.org/w/index.php?title=Special:Log/block&page=User:66.4.233.28

In the future you may wish to monitor contributions made from this IP number at: (RSS & ATOM feeds)

http://en.wikipedia.org/wiki/User_talk:66.4.233.28

Please investigate and take action as deemed necessary, at your earliest convenience. Thank you for your cooperation.

{{Real name redacted}}

Avicennasis

Wikipedia Abuse Response Team|date_sent=25 March 2010|reply=None yet.}}

{| class="wikitable"

! colspan="2" |

Case history

|-

| Investigated by: || Avicennasis

|-

| Contacted by: || Investigator, Netalarm sent second email on May 14, 2010.

|-

| Closed on: ||

|-

| Disposition: || {{ARDisp|1}} 01:42, 3 June 2010 (UTC)

|-

| valign="top" | Case log: || {{AR-done2}} 12:26, 25 March 2010 (UTC)
{{ARA|a}} 12:26, 25 March 2010 (UTC)
{{ARA|a}} 04:42, 15 May 2010 (UTC)
{{Done}} Message received from district, stating that they did not know how to handle this situation. Netalarmtalk 01:42, 3 June 2010 (UTC)

|}

{{ARA_bottom}}