2011-09-12 20:47:08A mystery, wrapped in an enigma
Daniel Bailey
Daniel Bailey
yooper49855@hotmail...
97.83.150.37

just deleted this comment:

richard.hockey at 12:01 PM on 12 September 2011
Congrats, well deserved. Also love the way UQ takes the credit.

R


The thing is, earlier it didn't have that spam link (I know, because I checked it and I still have that Firefox window open).  It had this link instead:
http://www.uq.edu.au/news/index.html?article=23783

So, someone went back into this comment & edited out the original link & substituted the link I deemed SPAM & then deleted.

Details on the poster (note: the IP of the deleted comment is 172.23.74.207, 130.1  -  more on this later):

Username 
FirstName 
LastName 
Email 
User Level 
Subscribe   Yes     No
Link Subscribe   Yes     No
Date Added 
IP 
Bias 
URL 

IP Address Location

IP Address 130.102.158.12
City Brisbane
State or Region Queensland
Country Australia
ISP Information Technology Services. 
Latitude & Longitude -27.467580  153.027892
Domain UQ.EDU.AU  
If we had a function to cross-reference existing users by IP address, it would be easier to try & sort this out. 

When Gilles was spamming us, some of his comments had a similarly funky IP address.  When I delete the characters after the comma, like I did with Gilles to locate his Grenoble IP location, I get this:
IP Address Location

IP Address 172.23.74.207
City -
State or Region -
Country -
ISP Private IP Address Lan. 
Latitude & Longitude 0.000000   0.000000
Domain -  

I already checked with John and he directed me to post this here, on the off-chance someone could help. 
Anyone have any ideas?
2011-09-12 20:59:13IP Address mystery
John Cook

john@skepticalscience...
123.211.208.191

That's the IP address of the University of Qld, which is where I'm now working. Very weird.

Hmm, one explanation, a climate denier sneaks into the Global Change Institute, creeps into my office with my laptop unattended, registers an account richard.hockey then logs in under my account to use my moderator abilities to edit the comment.

Yep, that makes no sense. Have no clue what's going on.

2011-09-13 01:24:44
Sphaerica

Bob@Lacatena...
76.28.5.93

Dan/John,

IP addresses in the range of 172.16.0.90 to 172.31.255.255 are reserved for private networks (internal use).


For instance, if you have a router that is distributing access to one IP address across several home computers, the external IP address might be 130.102.158.12, but the router may assign internal IP addresses such as 172.16.0.1, 172.16.0.2, etc. to the home computers.  This of course applies to much larger networks, too, and is typical of businesses and universities which have a block of IP addresses assigned, but far more users than they have addresses, so people don't each get their own and instead a router handles all of the traffic.

As such, the number is meaningless.  I think you are just seeing the "route" that a response has to take to get to the right computer within the network at 130.102.158.12.

So you know that it came from U of Qld, but not exactly what computer out of thousands within that network.

2011-09-13 01:25:13
Sphaerica

Bob@Lacatena...
76.28.5.93

Sorry, slight typo: The private network range is 172.16.0.0 to 172.31.255.255.