Wikipedia:Abuse response/108.32.x.x


 * The following page is an archived Abuse Response case. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report.  No further edits should be made to this page.  Click here to file a new report.  See WP:ABUSE for more information.

-

Requester comments
This is a persistent IP hopping vandal who uses sneaky vandalism. Typical traits include, but are not limited to:
 * changing random words
 * gratuitously adding wikilinks to random words
 * randomly changing individual words and wikilinking them
 * indiscriminately changing some links (eg "running gag" to "running gag" )
 * changing female names to "Chanel". This was a trait in the early vandalism but it has also been seen in later edits.

The IP intially used two address pools, 108.17.x.x and 108.32.x.x, both allocated to Verizon. An ANI report, now archived here, was made and eventually the 108.17.x.x range was blocked but the vandal persists to the present, having made, as of right now, 232 edits. As per the ANI discussion, I have been leaving the IPs a final or only warning and the IPs used have been documented at User:AussieLegend/Project 04. To date these IPs are:


 * 2010
 * 2-5 December
 * 7 December
 * 9 December
 * 9 December
 * 10 December
 * 11 December
 * 12/13 December
 * 13 December
 * 14 December
 * 16 December
 * 17 December
 * 18 December
 * 18 December


 * 18 December reported to ANI - 121 edits to this point


 * 18 December
 * 19 December
 * 20 December
 * 21 December
 * 22 December
 * 23 December
 * 23 December
 * 25 December
 * 26 December


 * 2011
 * 3 January
 * 3 January
 * 5 January
 * 10-15 January - added 24 January 2011
 * 24 January - added 24 January 2011
 * 26 January
 * 27 January - 321 edits to date
 * 30 January
 * 31 January

Note that the dates used above are Australian, because that's where I am.

Also as per the ANI discussion, I have been reporting each IP at User talk:KrakatoaKatie. She has been blocking semi-protecting pages as appropriate. Several of the IPs have been idividually blocked, which is what eventually lead to the rangeblock.

Discussion
Discussion transcluded from talk page

Registry information
NetRange:      108.0.0.0 - 108.57.255.255 CIDR:          108.0.0.0/11, 108.32.0.0/12, 108.48.0.0/13, 108.56.0.0/15 OriginAS: NetName:       VIS-BLOCK NetHandle:     NET-108-0-0-0-1 Parent:        NET-108-0-0-0-0 NetType:       Direct Allocation NameServer:    NS5.VERIZON.NET NameServer:    NS6.VERIZON.NET NameServer:    NS7.VERIZON.NET NameServer:    NS8.VERIZON.NET RegDate:       2009-06-05 Updated:       2010-12-28 Ref:           http://whois.arin.net/rest/net/NET-108-0-0-0-1
 * WHOIS report
 * Summarized WHOIS report:

OrgName:       Verizon Online LLC OrgId:         VRIS Address:       22001 Loudoun County Parkway City:          Ashburn StateProv:     VA PostalCode:     20147 Country:       US RegDate: Updated:       2010-08-12 Ref:           http://whois.arin.net/rest/org/VRIS

OrgAbuseHandle: VISAB-ARIN OrgAbuseName:  VIS Abuse OrgAbusePhone: +1-214-513-6711 OrgAbuseEmail: OrgAbuseRef:   http://whois.arin.net/rest/poc/VISAB-ARIN

OrgTechHandle: ZV20-ARIN OrgTechName:  Verizon Internet Services OrgTechPhone: 800-243-6994 OrgTechEmail: OrgTechRef:   http://whois.arin.net/rest/poc/ZV20-ARIN

Abuse summary
''As per reporter. Random words, wiki-linking random words etc etc''

Modus Operandi
Seems to be directed at Disney Channel shows such as Hannah Montana however there are a few exceptions.

Contact summary
No contact history entered.

{| class="wikitable" ! colspan="2" |

Case history
13:54, 31 January 2011 (UTC)
 * Investigated by: || Rich (MTCD) Talk Page
 * Contacted by: || Investigator
 * Closed on: || Rich (MTCD) Talk Page 13:54, 31 January 2011 (UTC)
 * Disposition: ||
 * Closed on: || Rich (MTCD) Talk Page 13:54, 31 January 2011 (UTC)
 * Disposition: ||
 * Disposition: ||
 * Disposition: ||

31/01/2011: E-Mail Sent To Verizon
 * valign="top" | Case log: || 25/01/2011: Case opened
 * valign="top" | Case log: || 25/01/2011: Case opened

-
 * }
 * The above page is an archived Abuse Response case and has been preserved for recording purposes. Please do not modify it. Subsequent reports for the same IP address should be filed under a new report. No further edits should be made to this page.