Jump to content

Wikipedia:WikiProject on open proxies/Requests/Archives/6

Add links
From Wikipedia, the free encyclopedia


173.236.254.46

{{proxycheckstatus}}

173.236.254.46 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

This address is not an open proxy. Reason: Requested unblock.

Where are these coming from? There is no active block here. no Declined to run a check -- DQ (t) (e) 13:24, 12 November 2011 (UTC)
Probably related to User talk:Pyrachi, which I'd previously declined. -- zzuuzz (talk) 10:49, 19 November 2011 (UTC)

188.72.128.0/17

{{proxycheckstatus}}

188.72.128.0/17 · contribs · block · log · stalk · Robtex · whois · Google

Reason: Requested unblock.

User talk:Resad-9 is requesting an unblock. Bringing here for confirmation. --Jayron32 20:20, 6 December 2011 (UTC)

Without an individual IP address I would say no Declined. There are lots of web servers, proxies, malware sites, and other properly blacklisted IPs in that range. Please consider IPBE or ask the blocking admin. -- zzuuzz (talk) 22:11, 6 December 2011 (UTC)

194.63.239.232

{{proxycheckstatus}}

194.63.239.232 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Unblock has been requested at User talk:Ggia where user states that the IP is not an open proxy. ​—DoRD (talk)​ 13:18, 7 December 2011 (UTC)

Not currently an open proxy This used to be assigned to a proxy in Norway, but now it looks like it's for a Greek high school and I can't get to the proxy nor see the signs of one. -- DQ (t) (e) 14:40, 8 December 2011 (UTC)


74.117.157.84

{{proxycheckstatus}}

74.117.157.84 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Escapeeyes again. --GenericBob (talk) 07:43, 3 December 2011 (UTC)

IP is an open proxy http open proxy [1]. Additional proxies below. Sailsbystars (talk) 12:27, 3 December 2011 (UTC)

Range Already blocked

199.58.161.130 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
173.236.31.114 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
67.215.231.250 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
64.15.147.205 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
64.120.174.135 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
174.37.39.114 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
69.175.126.66 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Rangeblocked, but expires soon

173.231.30.130 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)

Blocked but not rangeblocked

205.208.160.5 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)

Unblocked/Need blocking

74.117.157.84 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
173.249.145.105 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
173.198.228.7 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Already done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
173.199.152.28 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
188.138.94.247 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
96.30.0.28 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Not done Please explain this one a little further...i'm not seeing a proxy or webhost. -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
Sorry, that was a typo on my part. I coped this entire list by hand before a morning cup of coffee so it was inevitable I'd make at least one typo. :) Sailsbystars (talk) 14:01, 6 December 2011 (UTC)
 Already doneAnd it's already rangeblocked. Sailsbystars (talk) 14:02, 6 December 2011 (UTC)
67.23.255.64 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Not done I'm not sure on the size of this webhost. Someone inform me? Single IP hit for now. -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
85.25.116.183 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Already done -- DQ (t) (e) 10:52, 6 December 2011 (UTC)
199.96.156.76 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
 Already done, but including here since it came up an WP:AN. We should probably keep an eye on this proxy provider. Sailsbystars (talk) 13:58, 14 December 2011 (UTC)

65.189.246.48

{{proxycheckstatus}}

65.189.246.48 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock. עוד מישהו Od Mishehu 10:34, 9 December 2011 (UTC)

I'm not seeing an open proxy there myself. However, according to the block log, I think this would be better dealt with as a checkuser block. -- zzuuzz (talk) 10:42, 9 December 2011 (UTC)
Dealt with by Tiptoety. -- DQ (t) (e) 04:46, 10 December 2011 (UTC)

115.127.24.116

{{proxycheckstatus}}

115.127.24.116 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Unblock requested at User talk:Bellayet and User talk:Djhsunny. ​—DoRD (talk)​ 17:10, 9 December 2011 (UTC)

Probably should be unblocked. Looks like it was a misconfigured router, but the configuration has been fixed now. Sailsbystars (talk) 17:15, 9 December 2011 (UTC)
 Already done Modified by another admin. -- DQ (t) (e) 10:44, 13 December 2011 (UTC)

24.171.168.223

{{proxycheckstatus}}

24.171.168.223 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  • Reason: Private request.
  • Changed to just Not currently an open proxy. IIRC this is a school network and nothing of a such proxy has existed as far as I see. Disabling the global block and forwarding to stewards. -- DQ (t) (e) 02:05, 12 December 2011 (UTC)

211.30.150.155

{{proxycheckstatus}}

211.30.150.155 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  • Saw this turn up on my stalklist and when I looked at it earlier, it didn't look like a proxy, but nothing to say I actually checked it that much. If it is a proxy, then we need to standardize the blocking on this one. -- DQ (t) (e) 04:31, 10 December 2011 (UTC)

IP101.108.9.143

{{proxycheckstatus}}

101.108.9.143 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Other IPs making the same edits (see Sexual fetishism):

Just blocked for ongoing edit warring on the same articles (specifically, Conservative Party (UK)): 101.108.2.194 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan.

Or, if you feel thusly inclined, figure out if this is User:Panelgets or not. Also, another editor proposed that Jackmb1992 (talk · contribs) is the same editor; I have my doubts, personally, and if these are indeed open proxies then a CU is useless. Thanks, Drmies (talk) 01:26, 13 December 2011 (UTC)

Spot checking here and there, finding a majority from Thailand, I would recommend you try for a CU, though one thing did come back that 94.31.198.161:8088 used (and may still be, its just refusing connections right now) as a proxy. -- DQ (t) (e) 13:15, 13 December 2011 (UTC)
It's one of these routers and it looks like it isn't unsecured. I'm guessing it's just normal IP hopping as most of the IPs belong to the same broadband provider rather than open proxy abuse. Sailsbystars (talk) 17:19, 13 December 2011 (UTC)

70.137.138.129

{{proxycheckstatus}}

70.137.138.129 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

taking out material which is referenced (for example, this where he/she takes out reference and calls it "outdated". He/she is not in position to make such a judgement. Look at his/her other IP address Bastian (talk) 22:28, 13 December 2011 (UTC)

Reason: Suspicious edits, similar edits using IP addresses that are different

Not currently an open proxy This looks like standard IP hopping. Rather than using an open proxy, this IP user appears to be resetting his or her modem and acquiring a new IP address, either in good faith or bad. You may want to file a report at SPI if the use of multiple IPs is being used to circumvent the editorial process through WP:Votestacking or evading the 3rr rule, for example. If not, it's a content dispute. try dispute resolution. Sailsbystars (talk) 22:45, 13 December 2011 (UTC)

220.255.2.172

{{proxycheckstatus}}

220.255.2.172 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

There is an IP unblock request at User talk:Maglame, referring to 220.255.2.172, which was blocked by ProcseeBot. The block log says ‎ {{blocked proxy}} <!-- 121.7.15.115:8118 -->. JamesBWatson (talk) 10:27, 15 December 2011 (UTC)

Not currently an open proxy, unblocked -- zzuuzz (talk) 11:28, 15 December 2011 (UTC)


50.16.108.39

{{proxycheckstatus}}

50.16.108.39 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

See Wikipedia:AN3#User:50.16.108.39 reported by User:PassaMethod (Result: 1 month). Since whois shows that this IP belongs to Amazon AWS, it should count as a web server for our purposes. My understanding is that web servers are routinely blocked under the open proxy rules. Reporting the IP here so that others can check (a) is this rationale correct, (b) should the IP be hard blocked for a year. EdJohnston (talk) 15:22, 19 December 2011 (UTC) Reason: Suspicious edits

Yep, it's AWS, and as good as an open anonymising proxy in most cases. There's a question mark about how long to block them for, since the IP addresses can be easily reassigned. Some huge range blocks would make more sense, but that would need careful consideration due to the inevitable collateral, and it's not a hugely problematic range. In any case, blocking a single IP for a year or more is unlikely to cause problems for non-proxy users. The user's other IPs are open proxies, btw.[2] -- zzuuzz (talk) 16:05, 19 December 2011 (UTC)
This particular server is apparently used as a FreeBSD demo open to everyone. Sailsbystars (talk) 16:21, 19 December 2011 (UTC)

This same editor has also been stalking Radvo with this IP

he's backPass a Method talk 21:23, 19 December 2011 (UTC)

Yes, my software is impressive. Thank you. And, for the record, my 193. IPs were not proxies in the definitional sense; they were by way of a VPN. 68.171.97.132 (talk) 21:25, 19 December 2011 (UTC)
That's good enough for us. -- zzuuzz (talk) 21:27, 19 December 2011 (UTC)

more Pass a Method talk 22:22, 19 December 2011 (UTC)

Sigh. 69.50.198.243:3128 Sailsbystars (talk) 22:29, 19 December 2011 (UTC)


82.165.35.26 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

He's back. The previous IP's traced to United States, but this one traces to Germany. Pass a Method talk 02:01, 24 December 2011 (UTC)

No, I've had other IPs from other countries too. zzuuzz can confirm that. And how is reporting me here every time going to stop me from rejecting any edits of yours that I see need rejecting? Are they going to semi-protect every article you edit? Even if they do, what about the talk pages? They going to semi-protect those too? And, zzuuzz, how is it against policy to edit through a VPN? I bet a lot of good, long-time editors edit through VPNs. The policy is against open proxies. 82.165.35.26 (talk) 02:28, 24 December 2011 (UTC)
Do you mind telling me why you feel the need to track my edits? Pass a Method talk 02:47, 24 December 2011 (UTC)
I've already told you why. You removed that portion from your talk page. I've told you recently by saying that you need to learn to use citation templates and that your edits are generally bad because you don't appear to have a good grasp on Wikipedia's rules or guidelines, with the exception of a few. You already know the main issue I have with your edits. They are either WP:OR, WP:Synthesis, or both, or completely unsupported by the references you add. You've been told this by others on your talk page. You should have tried to stop making such edits by now. I'm also suspicious of the reason that one editor called you a pedophile. 82.165.35.26 (talk) 02:56, 24 December 2011 (UTC)
I have almost 5000 edits to my name. If my edits were so bad i would have at east one level 2 warning notice from an admin, which i dont. Pass a Method talk 03:12, 24 December 2011 (UTC)
A lot of editors' bad and/or dubious edits go unnoticed by administrators. Don't play that card. The point there is that you have been warned by other users, but you are still doing this kind of stuff. 82.165.35.26 (talk) 03:22, 24 December 2011 (UTC)
And why do you track Radvo (talk · contribs) edits? Pass a Method talk 03:30, 24 December 2011 (UTC)
I refuse to believe that you don't already know why, after what I said to you that one time. Maybe you should go back into your edit history and read what I said without outright saying it. He is a likely pedophile, and I'm not the only one who thinks that. 82.165.35.26 (talk) 03:41, 24 December 2011 (UTC)
Who else thinks that besides you? Pass a Method talk 04:22, 24 December 2011 (UTC)
You could find that out (those who have hinted at it) with a little investigating. It doesn't take much to look through and examine one's contributions. Good grief. 82.165.35.26 (talk) 04:39, 24 December 2011 (UTC)

Several IPs attacking Od Mishehu's talk page

{{proxycheckstatus}}

24.12.245.4 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
24.113.13.34 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
24.176.56.174 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
67.9.33.113 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
79.222.172.60 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
79.224.74.109 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
81.151.42.222 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
82.46.70.250 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
84.99.207.90 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
86.133.249.132 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
87.186.27.56 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
92.235.184.40 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
98.176.128.144 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
101.116.31.160 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
141.70.81.151 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
174.89.164.235 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
218.144.178.165 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: These IP addresses were involved with personal attacks on my talk page, which are typical of a specific vandal who uses open proxies. עוד מישהו Od Mishehu 17:26, 21 December 2011 (UTC)

That's 4chan, that is. Meatpuppets. A quick check says they are mostly dynamic and doesn't show any open proxies amongst it. -- zzuuzz (talk) 17:33, 21 December 2011 (UTC)
Not currently an open proxy Nothing to do here, concur with zzuuzz.... Sailsbystars (talk) 02:49, 24 December 2011 (UTC)

194.117.22.71

{{proxycheckstatus}}

194.117.22.71 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Unblock request from User_talk:Jotomicron#Blocked  Ronhjones  (Talk) 19:51, 22 December 2011 (UTC) Reason: Requested unblock.

Not currently an open proxyPlease go ahead and unblock. It looks like this was a proxy that was briefly misconfigured (which earned it a 2 month automatic block by Procseebot in November/early December), however I confirm that it does not proxy for me on any of the known open proxy configurations it has previously been open under. It may be blocked again if it gets misconfigured again (this appears to have also happened in June, so hopefully the sysadmin in charge will have a clue and not let it happen yet again). Sailsbystars (talk) 20:56, 22 December 2011 (UTC)
 Done Unblocked by DQ. Sailsbystars (talk) 02:39, 24 December 2011 (UTC)

74.221.217.79

{{proxycheckstatus}}

74.221.217.79 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

This edit looks like my regular stalker Escapeeyes again, and the IP is suspicious. --GenericBob (talk) 10:18, 24 December 2011 (UTC)

46.182.123.30 & Co.

{{Proxycheckstatus}}

46.182.123.30 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
188.118.196.40 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
184.105.231.11 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
217.116.195.24 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
91.89.148.141 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
95.220.172.204 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
146.185.23.179 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
188.165.170.197 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
I have verified and (re)blocked some as tors, but can't check for http proxy (which they most likely are; my current firewall blocks even some tor check requests), thus listing here for possible rangeblocks/long blocks, not to forget :). Materialscientist (talk) 00:32, 2 December 2011 (UTC)
All blocked in some way shape or form by someone else. -- DQ (t) (e) 10:09, 6 December 2011 (UTC)

LPC evasion

{{Proxycheckstatus}}

151.73.107.253 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
151.77.118.210 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
151.77.229.156 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
195.239.204.42 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
2.33.25.37 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
24.141.5.202 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
67.249.142.59 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
78.243.186.206 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
83.52.109.108 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Over at Wikipedia:Sockpuppet investigations/LouisPhilippeCharles, all of these IPs came up. The edits are probably the same person, but the IPs geolocate all over the place, leading me to think that these are all open proxies. Can someone take a look? — HelloAnnyong (say whaaat?!) 04:20, 15 December 2011 (UTC)
 Unlikely IP is an open proxy aside from behavioral evidence. All are DSL or Cable providers and none has any overt evidence of being a proxy that I can find. In desperation, I tried portscans on several of the hosts and all of the ones I tried produced no results because they were down. If these are part of a proxy network, it's a pretty insidious one..... Sailsbystars (talk) 04:54, 15 December 2011 (UTC)

74.221.217.79

{{proxycheckstatus}}

74.221.217.79 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

This edit looks like my regular stalker Escapeeyes again, and the IP is suspicious. --GenericBob (talk) 10:18, 24 December 2011 (UTC)

http://flash-proxy.info/ Open web proxy. Range is 74.221.208.0/20. Sailsbystars (talk) 14:33, 24 December 2011 (UTC)
Blocked by DQ. Sailsbystars (talk) 16:03, 31 December 2011 (UTC)


67.215.232.66

{{proxycheckstatus}}

67.215.232.66 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock.

Unblock request at User talk:Kent Wang. Block log at [6]. DrKiernan (talk) 13:24, 30 December 2011 (UTC)

Proxy hosting range and it's blocked globally so even if we were keen to unblock it (which we aren't) the request would have to be made on meta. Best course of action is to grant IPBE to user, which has already been done, so I'm marking this request as closed. Sailsbystars (talk) 15:05, 30 December 2011 (UTC)

98.228.24.213

– This proxy check request is closed and will soon be archived by a bot.

98.228.24.213 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock. User talk:Madman2001 expresses that he does not believe this is currently a proxy; has no idea why he is blocked. --Jayron32 06:02, 31 December 2011 (UTC)

Not currently an open proxy One of the users neighbors likely has or had a virus as there was a zombie computer on this IP, but it looks like it was fixed or moved to a new ip about 2 weeks ago. Please unblock this IP. Sailsbystars (talk) 15:52, 31 December 2011 (UTC)
Unblocked. Sailsbystars (talk) 14:24, 5 January 2012 (UTC)

213.98.69.99

– This proxy check request is closed and will soon be archived by a bot.

213.98.69.99 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Historically, the long-term serial sockpuppeteer and vandal Light current (talk · contribs) has edited from the UK, using IPs associated with Tiscali UK and other English ISPs. A recent batch of trolling arrived from the address above, which (unusually) is linked to a Spanish ISP. Maybe it's an open proxy, maybe he's on vacation, maybe he moved to Spain. Thanks for looking into this one, TenOfAllTrades(talk) 13:50, 3 January 2012 (UTC)

Inconclusive Spain is a common winter vacation destination for Brits so there could be an easy explanation for this. While I can't find this listed as a proxy anywhere, I did a port scan and found it was open on telnet, ftp, and http ports, which is a bit weird for a not-webhost. I suspect it's a router device of some sort, perhaps a hotel or internet cafe. Regardless, I couldn't make it proxy so I don't think there's anything we can do here... Sailsbystars (talk) 14:43, 3 January 2012 (UTC)


217.114.215.250

{{proxycheckstatus}}

217.114.215.250 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits

IP is an open proxyUK hosting provider, likely block evasion.... Seems to be part of this service, which offers a free trial of proxy-like services. Hostname is actually vpn5.usaip.eu and range is 217.114.208.0/20. Sailsbystars (talk) 15:42, 16 December 2011 (UTC)
Ughhhh, there are 18 different hosting ranges it uses, lets see how many we've already blocked Sailsbystars (talk) 15:54, 16 December 2011 (UTC)

Already rangeblocked

83.133.127.114 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
176.31.212.166 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
64.120.252.163 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
78.129.227.67 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
76.73.32.186 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
178.216.48.143 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

short term rangeblock (may need extending)

109.200.11.131 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

unblocked

91.222.36.205 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
175.45.25.21 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
173.44.134.139 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
204.12.247.219 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
83.170.104.98 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
85.17.159.47 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
184.22.232.195 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
202.142.24.192 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
67.21.82.7 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
94.125.179.5 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
87.229.53.254 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

ranges to block

91.222.36.0/22 - Looks like someone's personal hosting range. Only one IP that made a test edit (so no to minimal collateral damage). 1-2 year block. "FOP Krakovetskiy Volodymir Vyacheslavovuch"
175.45.25.21 - "Wharf telecom" - Appears to be ISP, not hosting provider. Block IP only for a year. Appears to be subleased by "saaki.net" within a bigger range (175.45.0.0/18), but I can't pin down the exact range and there'd probably be unacceptable amount of collateral.
173.44.134.136/30 - Saaki.net - 1-2 yr block - no collateral
204.12.247.216/30 - 1-2 year (this and the above look like wholesale ISP things which are too dynamic for a longer block) - no collateral
83.170.64.0/18 - uk2 web hosting.... on looking at collateral, let's narrow it to 83.170.64.0/19 for five years, lots of nasty stuff on that range including previously blocked proxies, some collateral on the bigger range
202.142.24.192 - Can't tell if dynamic or not, just block IP for a yearish "Chijun Network (Beijing)Consulting&Service Co.Ltd"
67.21.82.0/26 - Global IP .info - 2 year block (this all belongs to directly to the proxy company!)
94.125.176.0/21 - ATW internet hosting (atw.hu) 5 year - no collateral damage
87.229.52.0/22 - deninet.hu web hosting - 5 year - no collateral damage

ranges not sure about

85.17.0.0/16 - leaseweb hosting - 5 years? or not... lots of edits, check this out: 85.17.19.191 (talk · contribs · WHOIS)
184.22.224.0/19 - "LACA01-02" - I have no idea what this is......
I haven't done collateral checks on the ranges yet, but I don't expect to find much given that most are hosting providers.... Sailsbystars (talk) 02:11, 24 December 2011 (UTC)
Collateral info now added. Sailsbystars (talk) 02:25, 24 December 2011 (UTC)

184.168.0.0/16

{{proxycheckstatus}}

184.168.0.0/16 · contribs · block · log · stalk · Robtex · whois · Google

Reason: The WHOIS of this range is to GoDaddy, a webhost.Jasper Deng (talk) 04:19, 30 December 2011 (UTC)

There are at least four currently blocked open proxies on the range, and out of the 65,000 IPs on that range, only 25 have ever edited wikipedia and only one or two have done so in a potentially constructive manner. Most look like they are/were proxies of one sort or another. I would support an extended (2-5 year) rangeblock. Sailsbystars (talk) 15:52, 30 December 2011 (UTC)

139.30.45.41

{{proxycheckstatus}}

139.30.45.41 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Unblock request at User talk:Simanowski  Ronhjones  (Talk) 01:17, 5 January 2012 (UTC) Reason: Requested unblock.

Not currently an open proxy Looks clean to me. The user's talk page explanation agrees with my own analysis that it was briefly open in 2008 (misconfigured router), but was quickly fixed. Safe to drop the block. Sailsbystars (talk) 04:04, 5 January 2012 (UTC)
Unblocked by Billinghurst (talk · contribs). Marking as closed.... Sailsbystars (talk) 14:11, 5 January 2012 (UTC)

122.194.11.208

{{proxycheckstatus}}

122.194.11.208 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Has previously been blocked for two months as an open proxy. Shortly after the block expired, vandalism commenced. I have blocked it for six months, but seek confirmation for the rationale and length of the block. Favonian (talk) 16:06, 9 January 2012 (UTC)

Confirmed open proxy on port 808, so an informative block rationale would be "blocked proxy 122.194.11.208:808". A rangeblock isn't feasible, as it's on a /14 that looks to be an ISP, so I think that a six month extension as you've done is pretty much spot on. Sailsbystars (talk) 15:16, 12 January 2012 (UTC)
Thank you! I've amended the block log and removed access by logged-in users. Favonian (talk) 18:05, 12 January 2012 (UTC)

67.159.5.178

{{proxycheckstatus}}

67.159.5.178 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Says they're not an open proxy anymore. Daniel Case (talk) 05:41, 12 January 2012 (UTC)

IP is an open proxyIrrelevant. It's a rangeblock on the hosting company known to host open proxies and even more importantly, it's a checkuserblock. Hell no on the unblock request. I found recent open proxies without much searching. Tell 'em to kindly disable their proxy (open or not) to edit. Sailsbystars (talk) 15:28, 12 January 2012 (UTC)
Oh, and just for good measure that particular IP has at least two web proxies hosted on it. Normally indef. ip/rangeblocks aren't done, but the one here looks to be well deserved.... Sailsbystars (talk) 16:21, 12 January 2012 (UTC)

64.90.40.46

{{proxycheckstatus}}

64.90.40.46 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Escapeeyes again.

IP is an open proxyConfirmed web proxy freefacebookproxies.com. Recommend rangeblock. Pretty much no contibutions for the last 3 years from the range except for this proxy (and one edit to the sandbox from 64.90.52.11 (talk · contribs · WHOIS)). Range is 64.90.32.0/19, and recommend blocking for 2-5 years. Sailsbystars (talk) 00:44, 18 January 2012 (UTC)
 Done -- DQ (ʞlɐʇ) 19:07, 20 January 2012 (UTC)

217.112.171.197

– This proxy check request is closed and will soon be archived by a bot.

217.112.171.197 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock at User talk:Svick#Unblocking my current IP. To my untrained eyes, it appears to still be open on port 8080, but I'll leave it up to the experts for verification. Thanks ​—DoRD (talk)​ 16:50, 30 December 2011 (UTC)

This is very interesting... this looks like it was an open proxy as of very recently (i.e. a few hours ago). However, it doesn't proxy for me right now on either of the alleged proxy configurations I've seen. I wouldn't unblock the IP right now, but I would grant IPBE to the user so they can get back to editting. Sailsbystars (talk) 17:08, 30 December 2011 (UTC)
IPBE granted. — Edokter (talk) — 17:58, 30 December 2011 (UTC)
Putting on hold for now. I (or another proxychecker) will check again in a few days to see if the IP is clear. Sailsbystars (talk) 15:53, 31 December 2011 (UTC)
So this is a problem. It's still a proxy or zombie computer.... I'll leave a message on the user's talk page explaining. Sailsbystars (talk) 01:26, 18 January 2012 (UTC)

184.173.245.20

– This proxy check request is closed and will soon be archived by a bot.

184.173.245.20 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Escapeeyes again. nslookup gives "gator1842.hostgator.com" this time. --GenericBob (talk) 08:44, 25 December 2011 (UTC)

 Likely IP is an open proxy I looked into this briefly, can't find the exact proxy mechanism, although it clearly is a proxy because it's spammed a certain blue pill across wide swaths of the internet. It belongs to the range 184.172.0.0/15 which is "the Planet" hosting, who I thought we had already blocked a long time ago for repeated hosting of open proxies.... Sailsbystars (talk) 14:41, 25 December 2011 (UTC)
I can't actually block anything that size...and i'm not going to be blocking 256 /16s :P blocked the /18 though. -- DQ (ʞlɐʇ) 11:06, 21 January 2012 (UTC)
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:WikiProject_on_open_proxies/Requests/Archives/6&oldid=1140261270"