Wikipedia:WikiProject on open proxies/Archives/2011/December

218.188.39.58

{{proxycheckstatus}}

218.188.39.58 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: It's from Hong Kong according to this, and it has been blacklisted in one list per here. It has been vandalising the Skandar Keynes page. This may be blocked already as a consequence of their actions, but I'm expecting a longer block as it's from an Asian country. Minima© (talk) 06:43, 5 December 2011 (UTC)

  Declined to run a check No reason to believe that a proxy is involved in the first place. IP vandalism from an Asian country with 1 spam blacklist hit is not a reason to check. -- DQ (t) (e) 11:01, 6 December 2011 (UTC)

141.0.9.77

  – This proxy check request is closed and will soon be archived by a bot.

141.0.9.77 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

141.0.9.60 are 2 ips that have been vandalizing in a very bot like manner, taking the last person who reverted their edit that they put the person who last edited, and it goes on and on until the IP just gets blocked. I really don't know if this is the right place for this, but this range of ip's are vandalizing. Bluefist talk 22:02, 3 December 2011 (UTC)

  Not currently an open proxy, but Opera Mini, a web browser for mobile phones. I've blocked the individual IP address. The range is very busy so a range block on 141.0.8.0/23 is a last resort. If there's much more disruption ask for a rangeblock at WP:ANI. -- zzuuzz (talk) 13:20, 4 December 2011 (UTC)

176.31.222.34

  – This proxy check request is closed and will soon be archived by a bot.

176.31.222.34 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Latest IP used by a habitual proxy abuser (Escapeeyes). --GenericBob (talk) 07:10, 30 November 2011 (UTC)

  IP is an open proxy, rangeblocked the /16. -- zzuuzz (talk) 08:14, 30 November 2011 (UTC)

46.163.114.55

  – This proxy check request is closed and will soon be archived by a bot.

46.163.114.55 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: A user who has previously used open proxies was using this IP address today. עוד מישהו Od Mishehu 09:00, 1 December 2011 (UTC)

  IP is an open proxy, confirmed as Tor, rangeblocked. -- zzuuzz (talk) 09:05, 1 December 2011 (UTC)

109.228.22.219

  – A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

109.228.22.219 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

{{proxycheck}}[1]. Suffice to say I already checked it, please block. :-P Sailsbystars (talk) 23:39, 1 December 2011 (UTC)

Host provider range is 109.228.0.0/18. Sailsbystars (talk) 00:06, 2 December 2011 (UTC)
Pretty quiet range (3 edits from 2 other ips, and one looks like a spammer, the other two look like a test edit)..... limited to no collateral damage from a rangeblock of a year or more. Sailsbystars (talk) 00:17, 2 December 2011 (UTC)

109.228.22.219

  – This proxy check request is closed and will soon be archived by a bot.

109.228.22.219 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Confirmed [2]. Suffice to say I already checked it, please block. :-P Sailsbystars (talk) 23:39, 1 December 2011 (UTC)

Host provider range is 109.228.0.0/18. Sailsbystars (talk) 00:06, 2 December 2011 (UTC)
Pretty quiet range (3 edits from 2 other ips, and one looks like a spammer, the other two look like a test edit)..... limited to no collateral damage from a rangeblock of a year or more. Sailsbystars (talk) 00:17, 2 December 2011 (UTC)
  IP is an open proxy (openproxy.co.uk). Range blocked. -- zzuuzz (talk) 13:29, 4 December 2011 (UTC)

Multiple

  – A proxy checker has placed this case on hold pending further information or developments.

203.114.112.101 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 3128
110.164.208.169 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 3128
119.84.79.169 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 80
202.44.65.9 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 3128
79.143.34.22 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 3128
67.171.76.13 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 8080
195.205.63.132 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan - Port 3128

Online proxy lists Cheers! Feedintm (talk) 22:29, 7 December 2011 (UTC)

Verified and blocked all but 67.171.76.13 and 110.164.208.169, which show up as proxies on Google but I couldn't connect through at this time. Materialscientist (talk) 00:33, 8 December 2011 (UTC)
110.164.208.169 is {{proxycheck}}. It's last confirmation was not that long ago today, and looks like the website that is on it is just down, so   Open proxy blocked
67.171.76.13 i'm leaving to check later...something smells fishy here but I can't put my finger to it yet. -- DQ (t) (e) 14:57, 8 December 2011 (UTC)

72.64.146.66

{{proxycheckstatus}}

72.64.146.66 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

User claims it isn't a Tor node, despite block message. Daniel Case (talk) 04:09, 30 November 2011 (UTC)

  IP is an open proxy, there's been a few of these recently. -- zzuuzz (talk) 08:22, 30 November 2011 (UTC)

213.141.129.72

{{proxycheckstatus}}

213.141.129.72 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Unblock request at User talk:Maxlapshin states that a misconfigured Squid installation caused the IP to be blocked. ​—DoRD (talk)​ 20:12, 5 December 2011 (UTC)

  Not currently an open proxy. Unblocked. -- zzuuzz (talk) 20:26, 5 December 2011 (UTC)

220.255.1.78

{{proxycheckstatus}}

220.255.1.78 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock at User talk:220.255.1.78.

ProcseeBot blocked 220.255.1.78 with an expiry time of 2 months ‎ (Blocked proxy 116.14.78.35:3128).

I have confirmed that 116.14.78.35:3128 is an open proxy, and that 220.255.1.78 is a proxy (see http://whatismyipaddress.com/ip/220.255.1.78) but not that it is an open proxy.

While I am here, can someone explain why ProcseeBot blocks for one IP address refer to another one? I.e. in this case why a block on 220.255.1.78 refers to 116.14.78.35? JamesBWatson (talk) 10:34, 22 November 2011 (UTC)

See Wikipedia:WikiProject_on_open_proxies/Guide_to_checking_open_proxies#Exit_servers. I find the proxy is currently exiting variously at 220.255.1.75, 220.255.1.48, 220.255.1.23, 220.255.1.36, 220.255.1.64 ... and so on. This is going to be messy, so perhaps we can leave this around here to unblock as soon as possible. I'd recommend liberal temporary IPBE, where appropriate, for users from Singapore. -- zzuuzz (talk) 11:19, 22 November 2011 (UTC)
Thanks for the clarification. JamesBWatson (talk) 11:36, 22 November 2011 (UTC)
Marking   IP is an open proxy per zzuuzz's comment above. -- DQ (t) (e) 11:03, 6 December 2011 (UTC)

80.239.242.0/23

{{proxycheckstatus}}

80.239.242.0/23 · contribs · block · log · stalk · Robtex · whois · Google

This IP range is used for anonymous editing on mobile phones using the Opera browser. Blocking this range of IPs means that anonymous mobile editing is impossible. There is no significant history of vandalism to justify such a block and it has the effect of perpetuating the problem of systemic bias that wikipedia has.

Reason: Requested unblock.

We're going to have defer this to WP:AN. Please start a thread there. -- zzuuzz (talk) 23:01, 26 November 2011 (UTC)
I'm afraid that comment means very little to me. How would I start a thread there? Wouldn't it be better it you started the thread there? AndrewRT(Talk) 23:07, 26 November 2011 (UTC)
Sorry, the request would be better handled at Wikipedia:Administrators' noticeboard (WP:AN). Please just add it to a new section at the bottom of the page. It would be better coming from you. -- zzuuzz (talk) 23:14, 26 November 2011 (UTC)
Ok thanks, I've opened that here: Wikipedia:Administrators'_noticeboard#Mobile_editing_block AndrewRT(Talk) 23:36, 26 November 2011 (UTC)
There doesn't seem much appetite to unblock the range as at least parts of it, and probably variable parts of it, are a proper open proxy. It's not unusual for mobile ranges to be blocked to anonymous users. -- zzuuzz (talk) 21:27, 5 December 2011 (UTC)

220.225.32.211

{{proxycheckstatus}}

220.225.32.211 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock. עוד מישהו Od Mishehu 07:38, 29 November 2011 (UTC)

  Not currently an open proxy, unblocked, on hold for re-confirmation over the next few days. -- zzuuzz (talk) 07:46, 29 November 2011 (UTC)

116.66.193.244

{{proxycheckstatus}}

116.66.193.244 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Unblock request at User talk:Samsujata says "My IP 116.66.193.244 had been used by other person earlier -running proxy, however, it is safe now. Please unblock it." Blocked by ProcseeBot, log says "{{blocked proxy}} <!-- 116.66.197.49:8080 -->". I have confirmed that 116.66.197.49:8080 is an open proxy, but cannot tell whether 116.66.193.244 is in use as an exit server or not. JamesBWatson (talk) 12:52, 5 December 2011 (UTC)

How did you confirm it? I'm not getting anything on that IP. Google suggests it was only alive for a day or two. -- zzuuzz (talk) 20:50, 5 December 2011 (UTC)
I used the proxy 116.66.197.49:8080 and was able to view a Wikipedia page using it. I then tried to edit the page, hoping the attempt would tell me the exit IP address, but I got a "Could not connect to proxy server" message. Subsequent attempts to use the same proxy failed, even when just trying to view the same page I had successfully viewed the first time. Presumably either the proxy had just gone off line while I was checking, or it was extremely unstable and unreliable, and I happened to be lucky first time. JamesBWatson (talk) 09:39, 6 December 2011 (UTC)
  IP is an open proxy It must have been down last night, or otherwise unreliable. I've just confirmed it as open as described. IPBE is in place. -- zzuuzz (talk) 10:16, 6 December 2011 (UTC)