Wikipedia:Abuse reports/Grawp IPs

From Wikipedia, the free encyclopedia

ATTENTION: Any IP striked out has either been reported or rejected. GO-PCHS-NJROTC (talk) 02:48, 19 April 2008 (UTC)

*24.32.226.171 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log)

*71.107.0.0/16 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.107.161.105 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.107.165.252 (talk • contribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.108.54.16 (talk • contribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.108.63.91 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.116.20.107 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.179.81.64 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *71.254.132.141 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log)

*86.134.219.187 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log) *86.156.230.202 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log)

*98.227.195.88 (talkcontribsdeleted contribsWHOISRDNStraceRBLshttpblock userblock log)

All of these IPs are suspected to have been used by Grawp (talk · contribs · deleted contribs · logs · block user · block log), a serial vandal and sockpuppeteer.--Urban Rose 15:57, 13 April 2008 (UTC)

Whoa! Was there a checkuser involved here? That's a lot of IPs in a lot of different ranges! If that's all the same person, those IPs are all zombie computers and should be blocked for at least one year (except the dynamic ones). Yes, they most surely need to be reported if they are zombies, they're probably sending a ton of email spam too. So, was there a checkuser? GO-PCHS-NJROTC (talk) 22:24, 15 April 2008 (UTC)
I'll might take this one on tomarrow if I can remember to. If someone else desires to investigate and/or make contact, feel free. GO-PCHS-NJROTC (talk) 02:23, 16 April 2008 (UTC)
Just to note, open proxies are not necessarily zombie computers. I suggest running all the IP addresses through a port scanner (like Nmap), and check for proxies. Nwwaew (Talk Page) (Contribs) (E-mail me) 02:16, 19 April 2008 (UTC)
Okay, that sounds sensible. GO-PCHS-NJROTC (talk) 03:01, 19 April 2008 (UTC)
Added another IP that attacked Jack Merridew's Indonesian-Wikipedia userpage ([1]); as Grawp has attacked Merridew in the past I have little reason to believe it isn't him. -Jéské (v^_^v E pluribus unum) 17:43, 5 May 2008 (UTC)
I won't be portscanning any of those since portscanning violates my ISP's AUP except when express permission is given by the party being portscanned. I don't want Grawp to get me disconnected; my mother would (not literally, it's just a figure of speech) kill me. If anyone else wants to scan the IPs, please do so and post the results here. GO-PCHS-NJROTC (Messages) 20:50, 2 June 2008 (UTC)

Have you finished the investigation? if so ill contact the ISP but ill report as serpate IP with a suspected link Prom3th3an (talk) 08:14, 29 May 2008 (UTC)

I've finished the investigation. Although there are some ISPs that show up more than once here, each of these IPs are on different networks for the most part. The contactor pretty much has to investigate for him/herself in this case. The ones crossed out have already been reported. Have fun (if you can)! GO-PCHS-NJROTC (Messages) 20:44, 2 June 2008 (UTC)
Are we sure grawp uses all these IPs, cause come of them a quite geograpahicaly distant from each other   «l| Ψrom3th3ăn ™ |l»  12:32, 4 June 2008 (UTC)
I was wondering that myself. I'm guessing that A. these are all open proxies or zombies B. these are all copy cats. GO-PCHS-NJROTC (Messages) 02:01, 12 June 2008 (UTC)
Notice Prom3th3an is the assigned Contactor for the Grawp Mess, however due to the vast ammount of IP's and cross checking that is required it may be sometime before this report is resolved

  «l| Ψrom3th3ăn ™ |l»  12:34, 4 June 2008 (UTC)