Wikipedia:Abuse response/84.203.0.0/17

Abuse Response
Abuse Response
Report Status
IP Address	84.203.69.86
Contributions	Contributions
Page Moves	Page moves
Block Log	Block log
Contribution History	Contribution history
Status	Closed
Requestor	Smartiger (talk)
Date	14:42, 7 July 2010 (UTC)
Investigator	--ANowlin: talk
Contactor	--ANowlin: talk

84.203.69.86 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

Requester comments

The history of this seems to begin last year, with the blocking of a registered account. (I won't name it here out of consideration of privacy concerns, but it's fairly clear from the history, and I'll supply it on request, privately or otherwise.) Subsequently, similar editing continued anonymously across the noted range, which is the entire dynamic IP range of domestic customers of the ISP Smart Telecom (of which I'm also one, and hence have been collaterally affected when trying to edit "anonymously", along with various others). Since then, blocks have been applied across the whole range by several different editors, of lengths escalating up to three months, along with account creation. As of now, the whole ISP is again "softblocked" for another three months. Some time ago, a Smart Telecom admin indicated a (somewhat non-specific) willingness to look into this, but may have been waiting for some more "official" contact from Wikipedia before doing anything about it. Judging by the range contribs tool, the "problem" editor has been used three different IPs in that range since the lifting of the previous block, for roughly 200 edits, while a roughly similar number of unrelated edits were being made in parallel with those from other IPs in the affected range. Smartiger (talk) 14:42, 7 July 2010 (UTC)[reply]

Discussion

Archived Discussion

The following discussion is closed. Please do not modify it. Subsequent comments should be made on the appropriate discussion page. No further edits should be made to this discussion.

Unless I'm missing something their are no blocks for this IP. Mlpearc powwow 14:43, 8 July 2010 (UTC)[reply]

CIDR: 84.203.0.0/17 does have multiple edits, but there's no tool to easily check for blocks within a range. Could you provide the IP addresses used specifically by this vandal so we can check them? The account involved can just be added here, or if you prefer, emailed to wikimedia-en-abuse [at] lists.wikimedia.org so we can review them. Netalarm^talk 15:35, 8 July 2010 (UTC)[reply]

No need to check within it, the whole range's been blocked: [1] (Sorry if I was unclear on that point.) The three most recent IPs, used between the previous rangeblock and the current one, are: 84.203.69.86, 84.203.72.8 and 84.203.78.178. The originally involved account is Redking7 -- as far as I'm aware, you'd need to speak to Alison or another checkuser for the specifics on that. Smartiger (talk) 16:48, 8 July 2010 (UTC)[reply]

Oops, I seem to have messed up the page name in filing the request: I'd intended to place it at Wikipedia:Abuse response/84.203.0.0/17, and instead ended up with some arbitrary point within the range. My mistake; I've now moved it. Sorry for any confusion caused. Smartiger (talk) 16:53, 8 July 2010 (UTC)[reply]

This shows significant reason to investigate. Will be following up with the user soon enough. -- /DeltaQuad|Notify Me\ 14:20, 10 July 2010 (UTC)[reply]

This range is blocked due to the long term disruption caused by Redking7 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and his socks, particularly including IP socks. It'd probably be best if a community ban was formalised on the editor in question, that way the range can probably be unblocked and any edits he does make being reverted per WP:BAN without having to put up with his disruption. I'll get the details together and post the ban proposal on AN in the next day or two. 2 lines of K₃₀₃ 12:58, 15 July 2010 (UTC)[reply]

The discussion above is closed. Please do not modify it. Subsequent comments should be made on the appropriate discussion page. No further edits should be made to this discussion.

Case active again

I'm taking over this case per DeltaQuad. Requesting any status updates from involved users, including the submitter, and other involved investigators, as the case appears to be going stale (over 30 days old). --ANowlin: talk 00:45, 16 August 2010 (UTC)[reply]

Updates Contacting ISP

Due to the age of this case, and the effective block, report is completed, and the ISP will be contacted. (Disregard any requests for an update) --ANowlin: talk 01:24, 16 August 2010 (UTC)[reply]

Registry information

WHOIS report
Summarized WHOIS report:

inetnum:        84.203.0.0 - 84.203.127.255
descr:          This range is used for Smart Telecom DSL Customers
netname:        IE-SMART-TELECOM-IPV4
country:        IE
admin-c:        RK2019-RIPE
tech-c:         ST1911-RIPE
status:         ASSIGNED PA
mnt-by:         smart-telecom-noc
source:         RIPE # Filtered

role:           Smart Telecom NOC Role
address:        Smart Telecom Holdings
address:        Digiweb Data Centre
address:        College Business & Tehnology Park
address:        Blanchardstown
address:        Dublin 15
address:        Ireland
admin-c:        DC323-RIPE
tech-c:         CE550-RIPE
tech-c:         DC323-RIPE
tech-c:         AM10478-RIPE
e-mail:         noc@smarttelecom.ie
nic-hdl:        ST1911-RIPE
mnt-by:         smart-telecom-noc
source:         RIPE # Filtered

person:         Ronan Kelly
phone:          +35314699344
address:        Smart Telecom
address:        3300 Lake Drive
address:        Citywest Business Park
address:        Dublin 24
address:        Ireland
nic-hdl:        RK2019-RIPE
mnt-by:         smart-telecom-noc
source:         RIPE # Filtered

route:        84.203.0.0/16
descr:        Smart Telecom
origin:       AS31458
mnt-by:       smart-telecom-noc
source:       RIPE # Filtered

Abuse summary

It appears as though this is one of may IPs controlled by a sockpuppet master. We believe this account is controlled by Redking7, as per this investigation: Wikipedia:Sockpuppet_investigations/Redking7/Archive. Redking7 has a long record of abuse on Wikipedia, and it appears his actions are now affecting the entire 84.203.0.0/17 subnet. Block log

Contact summary

No contact history entered.

Case history
Investigated by:	--ANowlin: talk
Contacted by:	Investigator
Closed on:	00:02, 10 March 2011 (UTC) by Rich(MTCD)^{Talk Page}
Disposition:	Awaiting reply.
Case log:	Approved for investigation. --DQ Report done, ISP being contacted. --ANowlin: talk 01:23, 16 August 2010 (UTC)[reply] Closed without response. - Rich(MTCD)^{Talk Page} 00:02, 10 March 2011 (UTC)[reply]