Wikipedia:Abuse reports

Poll without page-refresh

	del.icio.us
	Digg
	Furl
	Reddit
	Rojo
	Add to OnlyWire

Proposal
A Proposal in regards to requirements to be a contactor is on the WP:ABUSE talk page. We would like input from anyone who is active or has an interest in Abuse Reports. Thanks

General help	Help desk • Site directory • Editor's index • Image and media copyright • Userpage help • New user help

Report abuse	Vandalism • Spam • Edit warring (3RR) • Improper usernames • Open proxies • Sock puppets • Copyright violations • Long term abuse • ISP reporting • BLP sanctions logging

Request assistance	Editor assistance • Page protection • Checkuser • Oversight • Requests for Arbitration • Mediation: Formal / Informal • Requests for comment • Wikiquette alerts

Noticeboards	Admins' noticeboard • Incidents • ArbCom enforcement • Biographies • Conflict of interest • Ethnic and cultural conflicts • Fiction • Fringe theories • Neutral point of view • Original research • Reliable sources

Abuse reports

Shortcuts: WP:ABUSE WP:AbRep

Wikipedia:Abuse reports is a centralized forum for the reporting and investigation of abuse complaints, related to IP Address-specific vandalism, to be reported to service providers. Please be aware that this is not an official contact system put in place by the Wikimedia Foundation, but a volunteer-run process to counter vandalism that has the community's blessings.

Instructions for filing editors – please read:

You may report any IP Address here. Do not report accounts here.
Please do not list IP addresses without a significant (At least 5 Blocks) history of vandalism. As contacting ISP's is a time consuming business, your request may be rejected.
We do not block accounts here. If an anonymous user is presently vandalising Wikipedia, please go to WP:AIV.
We do not handle sock puppet identification. For that, see Wikipedia:Suspected sock puppets and Wikipedia:Requests for Checkuser.
Please use the {{user-uaa}} instead of {{userlinks}}.

Recently actioned •

Rejected requests (since Nov 2006)

Volunteers: expand for instructions

This page has a backlog that requires the attention of experienced editors.
Please remove this notice when the backlog is cleared.

For a list of current Abuse Reports volunteers, or for information on how you can help with the Abuse Reports project, please see the volunteers page. This process depends on helping hands just like you - and no administrator powers are required! A detailed guide for volunteers is also available.

You can subscribe to a web feed of this page in either RSS or Atom format.

This header: view • edit

1 Process
2 New alerts
3 Open cases
- 3.1 Under investigation
- 3.2 Investigation complete/in contact
  - 3.2.1 Contactor needed
  - 3.2.2 Contactor assigned
4 Rejected requests

Process

AR cases are a three step process:

Alert: An attentive user notices a trend of vandalism from a given IP, runs a whois, determines that the IP is registered to an ISP or organization that is likely to respond to an abuse report, and reports the IP here.

Under investigation: Once made, an alert is picked up by an investigator, who begins an investigation and compiles a report.

In Contact: Once a case has been investigated and a report prepared, the case is passed to a contactor. The contactor then attempts to contact the provider or organization responsible for the IP address. The contactor explains the situation to the organization and points them to the prepared report. The contact remains in contact with the organization, most likely by email, to answer any further questions or provide other requested information.

Once the contactor has made contact with the provider, the case remains open as long as contact continues. If the provider successfully resolves the complaint, then the contactor closes the case, with a summary of the result. If the provider is unwilling to cooperate, the contactor notes the case, and closes it with a summary.

New alerts

Please follow the instructions below. Please do not list IPs that have only made a few edits (unless they are part of a bigger case), as only severe, continuing vandalism should be listed here.

To report an IP address

In the text box below, replace IP with the IP address you are reporting and click the Report IP button. For a range of IP addresses, use the format 127.0.0.x Range and for two or more ranges use the format 127.0.0.x and 192.168.0.x Ranges. When reporting ranges, please replace the digits that are different with an x in the title of your report. There's no need to report different ranges if the IP addresses are sufficiently similar or run consecutively, 192.168.0.1 and 192.168.10.1 as an example (these could be reported as 192.168.x.x Range). Please note that 127.0.0.1 and any IP starting with 192.168 generally aren't the IP you're looking for. These IPs generally can't be accessed by someone outside of your LAN.
Edit the resulting page, following the instructions in uppercase. Remember to provide a summary of why you believe the IP address(es) requires attention. Please use an {{IPvandal}} template for each IP address you are reporting (this is especially important when reporting a range), list the name of the provider (from the whois report), and briefly summarize the situation. Sign your comments with ~~~~ in case the investigator needs to contact you for clarification, and save the page.
Edit this page, adding the following text above the most recent nomination (replacing IP with the IP address you're reporting):

*[[Wikipedia:Abuse reports/IP]]

Open cases

Under investigation

Please do not move alerts into this section unless you are the investigator opening a new case.

Wikipedia:Abuse reports/81.15x.x.x and 86.1x.x.x ranges

Wikipedia:Abuse reports/66.99.216.3

Wikipedia:Abuse reports/202.138.180.35

Wikipedia:Abuse reports/168.9.27.3

Wikipedia:Abuse reports/213.166.17.18

Wikipedia:Abuse reports/212.219.0.8

Investigation complete/in contact

Contactor needed

Please do not move alerts into this section unless you are the investigator passing the case on to a contactor and do not intend to make contact yourself.

Wikipedia:Abuse reports/212.219.242.xx

Contactor assigned

Please do not move alerts into this section unless you are the investigator continuing the case as a contactor, or a contactor taking a completed investigation.