Wikipedia:Abuse response
Wikipedia:Abuse reports is a centralized forum for the reporting and investigation of abuse complaints, related to IP-specific vandalism, to be reported to service providers, particularly schools and universities. Please be aware that this is not an official contact system put in place by the Wikimedia Foundation, but a volunteer-run process to counter vandalism.
Recently actioned • | Rejected requests (since Nov 2006) |
You may not report user accounts here—they will be removed on sight; persistent logged-in vandals, may be reported at Wikipedia:Long term abuse. The inability of this page to handle registered accounts is that potential violators, if not an anonymously editing user, cannot be traced back to their IP addresses (without additional tools, such as CheckUser), and hence cannot be reported to the relevant ISP.
Please do not list IP addresses without a significant history of vandalism. The editors who assist with this process will not handle such requests: the abuse reports process involves real-life contact with outside organisations, which carries a large workload—only the most damaging accounts will be accepted into this system. As a guiding standard, the target IP should have been blocked five or more times in the recent past.
This page is not for reporting currently-active vandal accounts, or petty vandalism: such requests should be directed at Wikipedia:Administrator intervention against vandalism, where they will be handled by a project administrator; similarly, this process is not for sock puppet identification: for that, see Wikipedia:Suspected sock puppets and Wikipedia:Requests for checkuser.
Process
AR cases are a three step process:
- Alert: An attentive user notices a trend of vandalism from a given IP, runs a whois, determines that the IP is registered to a school, a government agency, or other body that is likely to respond to an abuse report, and reports the IP here.
- Under investigation: Once made, an alert is picked up by an investigator, who begins an investigation and compiles a report.
- In Contact: Once a case has been investigated and a report prepared, the case is passed to a contactor. The contactor then attempts to contact the provider or organization responsible for the IP address. The contactor explains the situation to the organization and points them to the prepared report. The contact remains in contact with the organization, most likely by email, to answer any further questions or provide other requested information.
Once the contactor has made contact with the provider, the case remains open as long as contact continues. If the provider successfully resolves the complaint, then the contactor closes the case, with a summary of the result. If the provider is unwilling to cooperate, the contactor notes the case, and closes it with a summary.
Volunteering
This page has a backlog that requires the attention of willing editors. Please remove this notice when the backlog is cleared. |
For a list of current Abuse Reports volunteers, or for information on how you can help with the Abuse Reports project, please see the volunteers page. This process depends on helping hands just like you - and no administrator powers are required! A detailed guide for volunteers is also available.
Userboxes
User:Prom3th3an/contact
User box: {{User:Prom3th3an/contact}}
User:Prom3th3an/investigate
User box: {{User:Prom3th3an/investigate}}
New alerts
Please follow the instructions below. Please do not list IPs that have only made a few edits (unless they are part of a bigger case), as only severe, continuing vandalism should be listed here.
To report an IP address
- In the text box below, replace
IP
with the IP address you are reporting and click theReport IP
button. For a range of IP addresses, use the format127.0.0.x Range
and for two or more ranges use the format127.0.0.x and 192.168.0.x Ranges
. When reporting ranges, please replace the digits that are different with an x in the title of your report. There's no need to report different ranges if the IP addresses are sufficiently similar or run consecutively, 192.168.0.1 and 192.168.10.1 as an example (these could be reported as192.168.x.x Range
). Please note that 127.0.0.1 and any IP starting with 192.168 generally aren't the IP you're looking for. These IPs generally can't be accessed by someone outside of your LAN. - Edit the resulting page, including entering the IP number in the {{IPvandal}} template and provide a summary of why you believe the IP address(es) requires attention. Please use an {{IPvandal}} template for each IP address you are reporting (this is especially important when reporting a range), list the name of the provider (from the whois report), and briefly summarize the situation. Sign your comments with
~~~~
in case the investigator needs to contact you for clarification, and save the page. - Edit this page, adding the following text above the most recent nomination (replacing IP with the IP address you're reporting):
*[[Wikipedia:Abuse reports/IP]]
- Wikipedia:Abuse reports/208.79.x.x
- Wikipedia:Abuse reports/212.219.242.xx
- Wikipedia:Abuse reports/86.1xx.x.x range
- Wikipedia:Abuse reports/213.166.17.18
- Wikipedia:Abuse reports/142.162.x.x range
- Wikipedia:Abuse reports/Telstra Perth range
- Wikipedia:Abuse reports/208.108.0.0/16
- Wikipedia:Abuse reports/170.185.0.0/16
- Wikipedia:Abuse reports/IP/79.x.x.x
- Wikipedia:Abuse reports/71.x.x.x
- Wikipedia:Abuse reports/70.241.x.x Range
Open cases
Under investigation
Please do not move alerts into this section unless you are the investigator opening a new case.
Investigation complete/in contact
Contactor needed
Please do not move alerts into this section unless you are the investigator passing the case on to a contactor and do not intend to make contact yourself.
English
Spanish
Norwegian
Contactor assigned
Please do not move alerts into this section unless you are the investigator continuing the case as a contactor, or a contactor taking a completed investigation.
- Wikipedia:Abuse reports/70.167.245.166
- Wikipedia:Abuse reports/Grawp IPs
- Wikipedia:Abuse reports/211.120.230.129
- Wikipedia:Abuse reports/69.19.14.xx
- Wikipedia:Abuse reports/71.3.247.94
- Wikipedia:Abuse reports/67.52.216.5
- Wikipedia:Abuse reports/208.75.47.115
- Wikipedia:Abuse reports/66.168.119.24
- Wikipedia:Abuse reports/67.53.64.100
- Wikipedia:Abuse reports/66.158.73.2
- Wikipedia:Abuse reports/158.123.159.2
- Wikipedia:Abuse reports/64.45.255.134
- Wikipedia:Abuse reports/209.202.75.74
- Wikipedia:Abuse reports/212.219.143.50
- Wikipedia:Abuse reports/207.73.66.201
- Wikipedia:Abuse reports/24.39.100.235
- Wikipedia:Abuse reports/218.186.9.2
- Wikipedia:Abuse reports/72.159.134.195
- Wikipedia:Abuse reports/76.7.2.144
- Wikipedia:Abuse reports/63.162.143.21
- Wikipedia:Abuse reports/169.199.38.130
- Wikipedia:Abuse reports/68.96.16.71
- Wikipedia:Abuse reports/209.56.73.2
- Wikipedia:Abuse reports/38.116.200.64
- Wikipedia:Abuse reports/218.185.79.222
- Wikipedia:Abuse reports/66.99.52.162
- Wikipedia:Abuse reports/205.196.178.196
- Wikipedia:Abuse reports/205.196.178.200
- Wikipedia:Abuse reports/203.52.130.138
- Wikipedia:Abuse reports/207.15.197.6
- Wikipedia:Abuse reports/217.87.x.x
- Wikipedia:Abuse reports/212.219.250.1
- Wikipedia:Abuse reports/208.123.40.34
- Wikipedia:Abuse reports/216.20.84.250
- Wikipedia:Abuse reports/205.221.150.3
- Wikipedia:Abuse reports/142.227.176.250
- Wikipedia:Abuse reports/164.58.28.74
- Wikipedia:Abuse reports/82.110.35.114
- Wikipedia:Abuse reports/122.104.x.x
- Wikipedia:Abuse reports/99.141.x.x and 99.144.x.x and 99.145.x.x ranges
Rejected requests
- All rejected requests are now archived for easy retrieval as necessary. Please see Wikipedia:Abuse reports/Rejected.