Wikipedia:Abuse response/209.122.160.124

Discussion Check the talk page; this IP supposedly belongs to Lexington High School (which fits with the reverse DNS address, lexingtont160.l.subnet.rcn.net) and has been blocked numerous times before yet continues to vandalize. They always stop after the final warning just long enough to make us start over with the warnings and such, or if they get blocked, they begin vandalizing again very shortly after the block ends. I know it's problematic to block an IP, but this is getting out of hand, and schools have been blocked before (I know because mine was). -Unknownwarrior33 03:11, 2 December 2006 (UTC)
 * Accepted by ST47, 15:23, 29 December 2006 (UTC)

Edits
331 edits to 171 pages, 321 were to articles

Average edits per day: 0.73 (since last active, for last 331 edit(s))

Unmarked edits with no summary: 95.17% (315 edit(s))

Warnings
54 warnings, 18 final, between 1300 and 2000 UTC, Jan 6 2004-Apr 1 2004, Oct 26 2004-Jun 8 2005, Dec 5 2005-Jun 16 2006, Oct 20 2006-Dec 7 2006

Blocks
10 blocks:


 * 14:15, December 7, 2006 CambridgeBayWeather (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 1 month (Vandalism)
 * 17:06, September 18, 2006 Can't sleep, clown will eat me (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 744 hours (repeated vandalism for several days - AO)
 * 17:05, June 16, 2006 Kukini (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 1 week (return vandal after many blocks)
 * 17:22, May 30, 2006 Can't sleep, clown will eat me (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 299 hours (repeated vandalism for several days)
 * 20:12, March 14, 2006 Adashiel (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 24 hours (vandalism)
 * 18:35, January 26, 2006 Pgk (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 1 week (Persistant vandalism, 5th block)
 * 18:06, January 17, 2006 Pgk (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 48 hours (Persistant vandalism)
 * 16:49, December 13, 2005 BanyanTree (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 48 hours (racist vandal, warned)
 * 13:31, June 8, 2005 Rmhermen (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 24 hours (repeated vandalism on Capital punishment)
 * 13:29, June 8, 2005 Rmhermen (Talk | contribs) blocked "209.122.160.124 (contribs)" with an expiry time of 24 hours (repeated vandalism on Capital punishment)

(times UTC)

Analysis
Most edits are schoolchild vandalism to encyclopedia articles during school hours.

Registration
Registered to Lexington High School

Preparation: The reverse DNS entry for an IP is found by reversing the IP, adding it to "in-addr.arpa", and looking up the PTR record. So, the reverse DNS entry for 209.122.160.124 is found by looking up the PTR record for 124.160.122.209.in-addr.arpa. All DNS requests start by asking the root servers, and they let us know what to do next. See How Reverse DNS Lookups Work for more information.

How I am searching: Asking a.root-servers.net for 124.160.122.209.in-addr.arpa PTR record: a.root-servers.net says to go to henna.arin.net. (zone: 209.in-addr.arpa.) Asking henna.arin.net. for 124.160.122.209.in-addr.arpa PTR record: henna.arin.net [192.26.92.32] says to go to auth2.dns.rcn.net. (zone: 122.209.in-addr.arpa.) Asking auth2.dns.rcn.net. for 124.160.122.209.in-addr.arpa PTR record: Reports lexingtont160.l.subnet.rcn.net. [from 207.172.11.14]

Answer: 209.122.160.124 PTR record: lexingtont160.l.subnet.rcn.net. [TTL 86400s] [A=209.122.160.124]

Contacting lhs_techsupport@sch.ci.lexington.ma.us with information, 15:52, 29 December 2006 (UTC)