Wikipedia:Abuse response/165.228.98.213

Abuse Response
Abuse Response
Report Status
IP Address	165.228.98.213
Contributions	Contributions
Page Moves	Page moves
Block Log	Block log
Contribution History	Contribution history
Status	Closed
Requestor	Pstanton (talk)
Date	23:33, 12 March 2009 (UTC)
Investigator	Avicennasis
Contactor	Damirgraffiti \|☺Say Yo to Me!☺ 00:10, 7 September 2011 (UTC)[reply]

The following page is an archived Abuse Response case. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report. No further edits should be made to this page. Click here to file a new report. See WP:ABUSE for more information.

165.228.98.213 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

Requester Comments

Has been blocked 10 times now. Every time he comes off a block, he goes on a random spree of vandalism. While he has his 2-year anonymous block, I'd recommend contacting his IP. He's been pretty prolific.

Registry information

WHOIS report
Summarized WHOIS report:

inetnum:      165.228.0.0 - 165.228.255.255
netname:      TELSTRAINTERNET14-AU
descr:        Telstra Internet
descr:        Locked Bag 5744
descr:        Canberra
descr:        ACT 2601
country:      AU
admin-c:      TIAR-AP
tech-c:       TIAR-AP
status:       ALLOCATED PORTABLE
remarks:      ----------
remarks:      All reports regarding SPAM or security breaches
remarks:      should be reported to 
remarks:      ----------
mnt-by:       APNIC-HM
mnt-lower:    MAINT-AU-TIAR-AP
changed:       20010614
changed:       20030731
changed:       20030806
changed:       20041214
source:       APNIC

person:       Telstra Internet Address Registry
address:      Telstra Internet
address:      Locked Bag 5744
address:      Canberra
address:      ACT 2601
country:      AU
phone:         61 3 9815 5923
e-mail:       
nic-hdl:      TIAR-AP
remarks:      Telstra Internet Address Registry Role Object
mnt-by:       MAINT-AU-TIAR-AP
changed:       19951128
changed:       20010523
changed:       20020115
changed:       20020813
changed:       20050310
source:       APNIC

Comprehensive edits analysis

For a complete history & analysis of all of this IP's edits, please click here.

Summary of edits
No. of articles edited	151
No. of user pages edited	10
Average edits per day	1.77
Top time segment	23:00 - 04:00 (UTC) Monday - Friday

Abuse analysis

Target Page or Category: Not entered

Type of action	Count
No. of abusive edits (blatant)	160
No. of warnings	45
No. of blocks	11
Other edits (non-blatant violations)	10
Blanked own userpage	3

Block history
No.	Block date	Block reason
1	1 November 2006	Vandalism
2	19 February 2007	Vandalism
3	27 February 2007	Vandalism
4	9 March 2007	Vandalism
5	15 March 2007	Vandalism
6	28 March 2007	Vandalism
7	8 May 2007	Vandalism
8	25 July 2007	Vandalism
9	26 May 2008	Vandalism
10	12 March 2009	Vandalism
11	29 August 2011	Vandalism

Abuse summary

Seems to be common Schoolplace vandalism. Many edits that are common with schools.

Hi my name is bob
SUE LOVES MIKE
I hate Jared

and other common vandalism. Gibberish text being inserted into articles as well as massive removal of content. Multiple blocks have been given out since 2007. All edits occur between 23:00 - 04:00 (UTC) Monday - Friday. The IP geolocates to Australia - the local times there would be roughly 9AM - 2PM, which would be common school hours, I believe.

Based on this edit, which is somewhat close to where the IP geolocates (as that is not an exact science), the edits might be coming from Pacific Lutheran College.

test edits: [1], [2], [3], [4], [5], [6], [7]

Vandalism: [8], [9], [10], [11], [12], [13], [14]

Page blanking: [15], [16], [17], [18], [19], [20], [21], [22]

Summary

IP is blocked until March 2011. If issues start again then, may be worth pursuing further. Before the two year block, there were a few mutli-hour blocks, a couple week blocks, and a 1 month and 6-month block. If the abuse continues past the two year block, the ISP should definitely be contacted. Right now, the last edit was a year ago, and most ISPs will not go back that far for abuse issues. ^Avicenna_sis @ 20:21, 28 March 2010 (UTC)[reply]

As the vandalism has continued, even after a two year block, it may be best to pursue this and make contact with the ISP's abuse team. ^Avic _ennasis @ 05:59, 29 Av 5771 / 05:59, 29 August 2011 (UTC)[reply]

Case history
Investigated by:	Avicennasis
Contacted by:
Closed on:
Disposition:
Case log:	Rejected. - IP is blocked until March 2011. If issues start again then, may be worth pursuing further. ^Avicenna_sis @ 20:21, 28 March 2010 (UTC)[reply] Approved for investigation. - came off 2 year block, and the vandalism has continued. ^Avic _ennasis @ 05:32, 29 Av 5771 / 05:32, 29 August 2011 (UTC)[reply] Investigation Complete ^Avic _ennasis @ 05:59, 29 Av 5771 / 05:59, 29 August 2011 (UTC)[reply] Report done, ISP being contacted. --Damirgraffiti \|☺Say Yo to Me!☺ 00:11, 7 September 2011 (UTC)[reply]

The above page is an archived Abuse Response case and has been preserved for recording purposes. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report. No further edits should be made to this page.