Wikipedia:Abuse reports/217.87.x.x

From Wikipedia, the free encyclopedia

Apparently the same person keeps on coming back to vandalise and be disruptive using this ISP. When one IP is blocked the user gets another dynamic IP.

  • Accepted for investigation by GO-PCHS-NJROTC (talk) 00:14, 27 March 2008 (UTC). GO-PCHS-NJROTC WILL NOT BE THE CONTACTOR IN THIS CASE.

Contents

How to contact T COM

It's simple really, just go to their webform at http://www.t-com.de/ip-abuse. GO-PCHS-NJROTC (talk) 00:16, 27 March 2008 (UTC)

INVESTIGATION COMPLETE, PROCEED TO CONTACT

Ok, since its simple ill take it on Prom3th3an (talk) 10:46, 1 April 2008 (UTC)

Contact Log

Pending Prom3th3an (talk) 10:46, 1 April 2008 (UTC)

Status / Outcome

In contact stage, pending first contact Prom3th3an (talk) 10:46, 1 April 2008 (UTC)

  • I don't know if anyone is pursuing contacting the ISP, but I have blocked the range for two weeks. --B (talk) 22:41, 2 May 2008 (UTC)

Now the same one is in the 217.237.xxx.xxx. range again

--Francis Schonken (talk) 19:17, 7 June 2008 (UTC)

- Adolphus79 (talk) 19:20, 7 June 2008 (UTC)

Concerning 217.87.x.x

Hi,

Excuse me writing here. I'm quite new to wikipedia and registered only for the purpose of communicating with you. I hope this is the right place. I've just been surfing around on wp and got the new message warning leading me to this link. And then I got there. I am in the 217.87.*.*-range, too. It's one of the huge ranges of the biggest German isp - tcom fka. Deutsche Telekom. The 217.237.150.11* range is the range of a public proxy any tcom customer may use (www-proxy.t-online.de). I often use this proxy for speed reasons, and that's basically the reason I got the new message warning and now write here.. The last digit of the ip usually varies, depending on where the abuser lives. Every larger node usually has 3 different possible last digits afaik. The ip can even vary on every refresh. In my area the ip varies from 217.237.150.116 - 217.237.150.118.

To make a long story short: the proxy is transparent, so why not look up and log the abusers real ip? Blocking the whole range would not be a good solution - please only punish those who deserve to be punished. I often have to use this proxy and people like this guy annoy me, as they abuse two systems that are intended to have a good purpose - what a scumbag :(

Once you have this guy's real ip in your logs, you might consider contacting the tcom security team directly with hard evidence at:
phone: +49 180 5334332
fax-no: +49 180 5334252
e-mail: abuse@t-ipnet.de
They are usually very friendly and they help unbureaucratically and fast if you provide hard evidence (timestamped logs).

Kind regards & keep me posted,

--Testomaximo (talk) 21:05, 7 June 2008 (UTC)
Moved here by   «l| Ψrom3th3ăn ™ |l»  01:35, 8 June 2008 (UTC)

Maybe a checkuser can answer on this ... I know (well, am 99% sure anyway) that they can look up the underlying IP address for a transparent proxy, but I'm not sure if there is a way within mediawiki to block the underlying IP and stop it from using transparent proxies. Normally, open proxies (and that's essentially what this is) are just blocked so there's no need to block an underlying IP. But this is above my pay grade, so I don't know what is technically possible for a checkuser to do. --B (talk) 01:40, 8 June 2008 (UTC)
If these proxies are indeed open proxies, then they should be reported on Wikipedia:WikiProject on open proxies for blocking. Some proxies are legitimate if not open to the world, however, but I have reported this range of IP addresses for checking just in case. =Axlq 04:27, 8 June 2008 (UTC)
Its sounds like its an ISP proxy, in that case we cant block it.....  «l| Ψrom3th3ăn ™ |l»  16:30, 8 June 2008 (UTC)