Wikipedia:Abuse response/167.21.254.12
- The following page is an archived Abuse Response case. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report. No further edits should be made to this page. Click here to file a new report. See WP:ABUSE for more information.
167.21.254.12 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
| Abuse Response | |
|---|---|
| Report Status | |
| IP Address | 167.21.254.12 |
| Contributions | Contributions |
| Page Moves | Page moves |
| Block Log | Block log |
| Contribution History | Contribution history |
| Status | Closed |
| Requestor | PMDrive1061 (talk) |
| Date | 23:01, 31 March 2009 (UTC) |
| Investigator | -- /MWOAP|Notify Me\ |
| Contactor | Pending |
Investigation Complete
Requester comments
This school IP was blocked for one year for chronic, persistent vandalism. The nonsense started one year and two days later. I blocked it for a month and sure enough, the garbage started back in as soon as the block was lifted. It's now blocked to the end of the school year. Could someone take a moment to contact the school's administrative department so that they can put a stop to this?
Discussion
Discussion
|
|---|
| #FBFBFB |
|
No discussion posted. |
Registry information
- WHOIS report
- Summarized WHOIS report:
WHOIS
|
|---|
|
OrgName: STATE OF DELAWARE OrgID: STATEO-19-Z Address: Department of Technology and Information Address: 801 Silver Lake Blvd City: Dover StateProv: DE PostalCode: 19904 Country: US NetRange: 167.21.0.0 - 167.21.255.255 CIDR: 167.21.0.0/16 OriginAS: AS30641 NetName: STOFDELAWARE NetHandle: NET-167-21-0-0-1 Parent: NET-167-0-0-0-0 NetType: Direct Assignment NameServer: NS01.DELAWARE.GOV NameServer: NS02.DELAWARE.GOV OrgTechHandle: GRT12-ARIN OrgTechName: Truitt George R. OrgTechPhone: 1-302-739-9551 OrgTechEmail: George.Truitt@state.de.us OrgTechHandle: MCA52-ARIN OrgTechName: Cabry Mark OrgTechPhone: 1-302-739-9552 OrgTechEmail: Mark.Cabry@state.de.us ARIN WHOIS database last updated 2010-03-11 20: 00 |
Comprehensive edits analysis
- For a complete history & analysis of all of this IP's edits, please click here.
Summary of edits No. of articles edited 266 No. of user pages edited 0 Average edits per day (active) 3.5 Top time segment 10/5/2006 (21 Edits)
Abuse analysis
Abuse analysis
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Abuse summary
- 0700 HRS - 1400 HRS (Local) is the most active time
- Edits on weekdays
- Defiantly a school (verified by WHOIS & editing times)
- Wide variety of subjects edited
- Sometimes multiple successive edits
- Blocked multiple times, by multiple administrators
Contact summary
No contact history entered.
| Communication sent:
12 March 2010 |
Dear Sir or Madam:
On behalf of Wikipedia's Abuse Response Team, I am contacting you to inform you of an incident or incidents of abuse originating from your network.
Wikipedia is a multilingual project to create a complete and accurate open content encyclopedia that can be used by anyone with Internet access free of charge. The English version may be viewed on the Web at http://en.wikipedia.org. A fundamental component of Wikipedia is that it may be edited by virtually anyone, as long as their edits benefit the goal of creating an encyclopedia. This approach has the downside that it exposes us to large scale vandalism, something that we are always trying to combat. We are able to achieve this by utilizing automated bots and tools to detect and revert unconstructive edits. If a user is identified as repeatedly abusing their privilege to edit Wikipedia, they are blocked, either temporarily or permanently.
I have completed an investigation and discovered that an IP address which appears to be registered to your organization, 167.21.254.12, has been habitually abusing Wikipedia by vandalizing articles at http://en.wikipedia.org. His or her actions are likely preventing other users on your network from contributing, as this IP address has been blocked from editing Wikipedia on multiple occasions. Multiple warnings have been issued over a long duration of time, asking the user to refrain from abusive use of Wikipedia. However, the user has chosen to ignore the warnings, and as a result has incurred several blocks to IP address under your jurisdiction. I am contacting you because this user continues to abuse Wikipedia after his or her block expires and because this user has been blocked five times or more, justifying a need for a report to your organization.
The Wikipedia Community takes abuse of Wikipedia very seriously. The Wikipedia Abuse Response Team has completed a thorough investigation on this matter which includes a detailed log of activities conducted by the IP address in question. The server logs which includes timestamps of the activity should assist you in identifying the user responsible for abusing Wikipedia.
The entire case is available for you to view at: http://en.wikipedia.org/wiki/Wikipedia:Abuse_report/167.21.254.12 Additional information regarding this users most recent contributions to Wikipedia may be found at: http://en.wikipedia.org/wiki/Special:Contributions/167.21.254.12 The block log for this IP may be found at: http://en.wikipedia.org/w/index.php?title=Special:Log/block&page=User:167.21.254.12 In the future you may wish to monitor contributions made from this IP number at: (RSS & ATOM feeds) http://en.wikipedia.org/wiki/User_talk:167.21.254.12 Please investigate and take action as deemed necessary, at your earliest convenience. Thank you for your cooperation. Should you have any additional questions, please do not hesitate to contact me. MWOAP of the Wikipedia Abuse Response Team (Abuse Report Team members use their Wikipedia screen names when sending abuse reports in order to protect their privacy. However, please understand that this does not abate the quality of this report.) |
|---|---|
| Reply received:
15 March 2010 |
Wikipedia Abuse Response Team,
I checked the Abuse report for 167.21.254.12 and found nothing to be newer than six months old. Problem is our logs rotate after six months. Has there been any other activity more recent that I can track? Also is it possible to get time date stamps when the page modification was sent by the user? That would help me a lot in pin pointing the exact system or systems.
Thanks, Glenn Wright Sr. Telecommunications Technologist 302-739-9571 (wk) / 302-739-7243 (fax) Glenn.Wright@state.de.us Department of Technology and Information 801 Silver Lake Blvd. Dover, DE 19904
Original Message----- From: Truitt George R (DTI) Sent: Monday, March 15, 2010 8:30 AM To: Wright Glenn Gcw (DTI) Subject: FW: Wikipedia Abuse report Importance: High
Glenn,
Can you check the proxy logs and see if we can narrow this down?
Rick Truitt |
| Communication sent:
15 March 2010 |
Thank you for you fast response. As far as I can tell there are 4 edits that are not older than six months, and 3 are not abusive, they were edits to a talk page requesting an unblock which was denied.
(http://en.wikipedia.org/w/index.php?title=User_talk:167.21.254.12&diff=prev&oldid=324839060 this is the removal of warnings, http://en.wikipedia.org/w/index.php?title=User_talk:167.21.254.12&diff=prev&oldid=324839497 request for unblock, http://en.wikipedia.org/w/index.php?title=User_talk:167.21.254.12&diff=prev&oldid=324840645 2nd unblock request, http://en.wikipedia.org/w/index.php?title=User_talk:167.21.254.12&diff=prev&oldid=324842674 adding tip of the day to the talkpage) The current block will expire September 21, 2010. I will keep an eye open when that day roles around. You can also get RSS (http://en.wikipedia.org/w/index.php?title=User_talk:167.21.254.12&action=history&feed=rss) and Atom (http://en.wikipedia.org/w/index.php?title=User_talk:167.21.254.12&action=history&feed=atom) feeds for the IP address actions.
A full log of the users contributions right back from the start is available at http://en.wikipedia.org/w/index.php?title=Special:Contributions&limit=500&target=167.21.254.12 It gives you the time stamp, the page, and then if you click "diff" it will show you what the user contributed to that page.
Sorry that we didn't get to this sooner so you could have tracked it down. Again I will keep my eyes open and let you know as soon as things popup again in September. Thank you very much for your time.
MWOAP of the Wikipedia Abuse Response Team
(Abuse Report Team members use their Wikipedia screen names when sending abuse reports in order to protect their privacy. However, please understand that this does not abate the quality of this report.) |
|---|---|
| Reply received:
17 Mar 2010 |
Just letting you know I was able to track down two of the addresses that are in the report. We have sent them to the schools responsible for them but if they were general use PC's I doubt we'll ever be able to determine who was actually using the system at the time. Regretfully the Education side or our network does not have user authentication yet. Costs a lot of money to implement but I would think for liability reasons it would be worth it and/or required. Maybe in the future.
Thanks, Glenn Wright DTI/TT |
Case history | |
|---|---|
| Investigated by: | -- /MWOAP|Notify Me\ |
| Contacted by: | Investigator |
| Closed on: | -- /MWOAP|Notify Me\ 20:41, 15 March 2010 (UTC) (awaiting reopen) |
| Disposition: |
|
| Case log: |
|
