Wikipedia:Abuse response/66.4.233.x

Requester comments
There has been repeated and persistent vandalism from IP addresses in the 66.4.233.x range, which belongs to the State of Tennessee Department of Education. Having looked into 66.4.233.1 to 66.4.233.30, I found the following IP addresses to have committed recent vandalism (each talk page now contains a SharedIPEDU tag):



There may be additional ranges within 66.4.x.x that have similar problems, but I'm not knowledgeable enough about Wikipedia to check contributions for these by any method other than manual entry. --Zach425 talk / contribs 22:43, 29 August 2009 (UTC)

Discussion
No discussion posted.

Registry information

 * WHOIS report for 66.4.233.3
 * WHOIS report for 66.4.233.4
 * WHOIS report for 66.4.233.7
 * WHOIS report for 66.4.233.8
 * WHOIS report for 66.4.233.10
 * WHOIS report for 66.4.233.13
 * WHOIS report for 66.4.233.14
 * WHOIS report for 66.4.233.17
 * WHOIS report for 66.4.233.18
 * WHOIS report for 66.4.233.20
 * WHOIS report for 66.4.233.21
 * WHOIS report for 66.4.233.24
 * WHOIS report for 66.4.233.25
 * WHOIS report for 66.4.233.26
 * WHOIS report for 66.4.233.28
 * WHOIS report for 66.4.233.30
 * WHOIS report for 66.4.233.31
 * WHOIS report for 66.4.233.34
 * WHOIS report for 66.4.233.37
 * WHOIS report for 66.4.233.38
 * WHOIS report for 66.4.233.39
 * WHOIS report for 66.4.233.41
 * WHOIS report for 66.4.233.42
 * WHOIS report for 66.4.233.47
 * WHOIS report for 66.4.233.48

OrgName:   State of Tennessee Department of Education OrgID:     STDO Address:   710 James Robertson Parkway Address:   7th Floor City:      Nashville StateProv: TN  PostalCode: 37243 Country:   US  NetRange:   66.4.0.0 - 66.5.255.255 CIDR:      66.4.0.0/15 NetName:   TEN-NASH-2BL NetHandle:  NET-66-4-0-0-1 Parent:    NET-66-0-0-0-0 NetType:   Direct Assignment NameServer: NS3.TENNK12.NET NameServer: NS4.TENNK12.NET Comment:   =20 RegDate:   2000-08-24 Updated:   2009-07-28 OrgAbuseHandle: CTI33-ARIN OrgAbuseName:  Tillman  Charles OrgAbusePhone: 1-615-401-4146 OrgAbuseEmail: ct3646@att.com OrgNOCHandle: CTI33-ARIN OrgNOCName:  Tillman  Charles OrgNOCPhone: 1-615-401-4146 OrgNOCEmail: ct3646@att.com OrgTechHandle: CTI33-ARIN OrgTechName:  Tillman  Charles OrgTechPhone: 1-615-401-4146 OrgTechEmail: ct3646@att.com ARIN WHOIS database last updated 2010-03-23 20: 00 Enter ? for additional hints on searching ARIN's WHOIS database. ARIN WHOIS data and services are subject to the Terms of Use available at https: //www.arin.net/whois_tou.html
 * Summarized WHOIS report (All the same}:

Comprehensive edits analysis

 * For a complete history & analysis of all of this IP's edits:


 * click here for 66.4.233.3
 * click here for 66.4.233.4
 * click here for 66.4.233.7
 * click here for 66.4.233.8
 * click here for 66.4.233.10
 * click here for 66.4.233.13
 * click here for 66.4.233.14
 * click here for 66.4.233.17
 * click here for 66.4.233.18
 * click here for 66.4.233.20
 * click here for 66.4.233.21
 * click here for 66.4.233.24
 * click here for 66.4.233.25
 * click here for 66.4.233.26
 * click here for 66.4.233.28
 * click here for 66.4.233.30
 * click here for 66.4.233.31
 * click here for 66.4.233.34
 * click here for 66.4.233.37
 * click here for 66.4.233.38
 * click here for 66.4.233.39
 * click here for 66.4.233.41
 * click here for 66.4.233.42
 * click here for 66.4.233.47
 * click here for 66.4.233.48


 * {| class="wikitable"

! colspan="2" | Summary of edits
 * width="200" | No. of articles edited
 * 604
 * No. of user pages edited
 * 10
 * Average edits per day
 * Sporadic
 * Top time segment
 * Mon-Fri, 1300 to 2000
 * }
 * Top time segment
 * Mon-Fri, 1300 to 2000
 * }
 * }

Abuse analysis

 * Target Page or Category: Not entered


 * {| class="wikitable"

! Type of action ! Count
 * width="200" | No. of abusive edits (blatant)
 * At least 195+
 * No. of warnings
 * 195
 * No. of blocks
 * 14
 * Other edits (non-blatant violations)
 * Not entered
 * Blanked own userpage
 * Not entered
 * }
 * Not entered
 * Blanked own userpage
 * Not entered
 * }
 * }


 * {| class="wikitable" width="275"

! colspan="3" | Block history ! No. ! Block date ! Block reason
 * 1
 * 18 March 2010
 * Vandalism
 * 2
 * 18 February 2010
 * Vandalism
 * 3
 * 7 December 2009
 * Vandalism
 * 4
 * 4 December 2009
 * Vandalism
 * 5
 * 11 August 2009
 * Vandalism
 * 6
 * 15 May 2009
 * Vandalism
 * 7
 * 30 April 2009
 * Vandalism
 * 8
 * 24 April 2009
 * Vandalism
 * 9
 * 31 March 2009
 * Vandalism
 * 10
 * 23 March 2009
 * Vandalism
 * 11
 * 14 January 2009
 * Vandalism
 * 12
 * 1 December 2008
 * Vandalism
 * 13
 * 18 November 2008
 * Vandalism
 * 14
 * 3 November 2008
 * Vandalism
 * }
 * Vandalism
 * 12
 * 1 December 2008
 * Vandalism
 * 13
 * 18 November 2008
 * Vandalism
 * 14
 * 3 November 2008
 * Vandalism
 * }
 * 3 November 2008
 * Vandalism
 * }

Abuse summary
Based on a random selection of articles, it seems like commonplace vandalism. There doesn't seem to be a goal or repeating theme at all. There is no political or social motivation other than simple disruption. The edits are childish. The pages are not linked in any easy to see way. It seems this individual is clicking on Random article and vandalizing whatever article they end up at. The WHOIS info comes back to a school system, and the edits for ALL of the IPs listed above almost always occur between 1300 - 2000, and almost always happen Mon-Fri. It seems like a students schedule, vandalizing during school hours (or perhaps after school in a computer lab or library.)

Modus Operandi
As above: It seems this individual is clicking on Random article and vandalizing whatever article they end up at.

Contact summary
{| class="wikitable" ! colspan="2" |

Case history

 * Investigated by: || Avic enna sis
 * Contacted by: || Investigator, Netalarm sent second email on May 14, 2010.
 * Closed on: ||
 * Disposition: ||  01:42, 3 June 2010 (UTC)
 * Closed on: ||
 * Disposition: ||  01:42, 3 June 2010 (UTC)
 * Disposition: ||  01:42, 3 June 2010 (UTC)
 * Disposition: ||  01:42, 3 June 2010 (UTC)


 * valign="top" | Case log: ||  12:26, 25 March 2010 (UTC) 12:26, 25 March 2010 (UTC)  04:42, 15 May 2010 (UTC) ✅ Message received from district, stating that they did not know how to handle this situation.  Netalarm   talk  01:42, 3 June 2010 (UTC)
 * valign="top" | Case log: ||  12:26, 25 March 2010 (UTC) 12:26, 25 March 2010 (UTC)  04:42, 15 May 2010 (UTC) ✅ Message received from district, stating that they did not know how to handle this situation.  Netalarm   talk  01:42, 3 June 2010 (UTC)


 * }