Wikipedia:WikiProject on open proxies/Archives/2011/September

This page is an archive. Do not edit the contents of this page. Please direct any additional comments to the current main page.

84.147.220.8

84.147.220.8 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Block was made three years ago. Can we see if things have changed since then? Daniel Case (talk) 18:30, 2 August 2011 (UTC)

Taking a quick look, I'm not quite sure what this means (I'm too tired to hash it right now), but lets leave it for now. The following came up:

113/tcp closed auth
5060/tcp open sip AVM FRITZ!Box WLAN 7170 29.04.80 (Jan 27 2010)

-- DQ (t) (e) 02:34, 3 August 2011 (UTC)

Seems down right now, not to concerned with port 5060, but recheck down the road would be good. -- DQ (t) (e) 13:50, 5 August 2011 (UTC)

Now that it's back up it has "8089/tcp open upnp Microsoft Windows UPnP" which I will let a person with more experience than myself explain any threat to us. -- DQ (t) (e) 01:33, 19 August 2011 (UTC)

Not currently an open proxy, unblocked. -- zzuuzz ^(talk) 10:56, 18 September 2011 (UTC)

202.156.13.10

216.82.251.227 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

There is a request at User talk:Azazyel to allow registered accounts to edit from this IP. Azazyel thinks that it is not an open proxy, and I can find no evidence that it is. I have tried to use the proxy and failed, but perhaps someone more knowledgeable than me on open proxies could check it. JamesBWatson (talk) 12:56, 22 August 2011 (UTC)

Doesn't look like there is one anymore for me. Unblocking and checking down the road. It's now for message labs and the proxy on 3128 got it's last verification on 16/06/2011 03:30:28, so I think it's gone. -- DQ (t) (e) 03:49, 23 August 2011 (UTC)

Not currently an open proxy It's still message labs. -- DQ (t) (e) 06:27, 20 September 2011 (UTC)

94.23.201.171

94.23.201.171 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Rangeblocked as part of an OVH range; says they're static on talk page and are not used for socking Wikipedia. Daniel Case (talk) 16:03, 7 September 2011 (UTC)

This is a webhost...so unless the can't use their home range and they're actually bots to do good...this is going nowhere. Will let Zzuzz handle this for the moment. -- DQ (t) (e) 12:42, 8 September 2011 (UTC)

Not currently an open proxy. IPBE granted instead. -- zzuuzz ^(talk) 08:35, 18 September 2011 (UTC)

192.54.222.27

192.54.222.27 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: IvfUSA (talk · contribs) is requesting unblocking. —DoRD (talk) 17:42, 17 September 2011 (UTC)

Unlikely IP is an open proxy. Entry IP 18.95.3.115:8909. Still open but doesn't seem to be currently exiting at a different address; IP unblocked. -- zzuuzz ^(talk) 08:17, 18 September 2011 (UTC)

216.108.224.0/20

216.108.224.0/20 · contribs · block · log · stalk · Robtex · whois · Google

See unblock request at User talk:Sigmundur#Proxy_unblock. This is apparently a paid proxy service in China. ~Amatulić (talk) 22:50, 19 September 2011 (UTC)

Reason: Requested unblock.

Tor server? Can't read right... (I'm guessing at this point, doubt it is that, I think it's a webhost) This one is out of my league. -- DQ (t) (e) 06:23, 20 September 2011 (UTC)

Likely IP is an open proxy, or an anonymising proxy anyway, as admitted in the request. I've granted IPBE. -- zzuuzz ^(talk) 13:41, 20 September 2011 (UTC)

128.187.97.6

128.187.97.6 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Request says it's an IP at Brigham Young University and not a proxy. Daniel Case (talk) 03:56, 22 September 2011 (UTC)

Unlikely IP is an open proxy, caching proxy which seems to have been fixed. -- zzuuzz ^(talk) 07:03, 22 September 2011 (UTC)

46.60.252.64/26

46.60.252.64/26 · contribs · block · log · stalk · Robtex · whois · Google

Reason: Requested unblock.

At User talk:Muzer there is the following message: "I am unable to edit Wikipedia when at school (IP = 46.60.252.69), even when logged in like I am now. I get an error about it being an open proxy - but I'm pretty sure my school's system isn't configured as an open proxy (if it was, I'm sure it'd be abused a lot). We do HAVE a proxy server, yes, that can be accessed by most schools in the area, but not by the general public as far as I know. I'd appreciate it if you could verify this." It looks to me very much as though this is correct. I can find no evidence that this proxy is an open one. The IP range has been responsible for a considerable amount of vandalism, and so keeping it blocked is justified, but it seems to me that the block should be for anon-only editing. Although I am confident that this is not an open proxy, I would be grateful if someone with more knowledge of proxies than me could check it. (I will also raise this with the blocking administrator.) JamesBWatson (talk) 10:17, 27 September 2011 (UTC)

I'm not seeing any signs of an open proxy in this range, just a school network. -- zzuuzz ^(talk) 11:20, 27 September 2011 (UTC)

Not currently an open proxy, unblocked. -- zzuuzz ^(talk) 13:57, 28 September 2011 (UTC)

46.4.2.216

– This proxy check request is closed and will soon be archived by a bot.

46.4.2.216 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: In use by banned editor who is known to reside in Montclair, NJ but now is using a Berlin IP address. I'm not sure if this is part of a range we can block or not. -- Atama頭 20:46, 29 August 2011 (UTC)

Add evidence:

See admission of IP socking here: [1].
Blacklisted as an open proxy here: [2].

Cheers, JoeSperrazza (talk) 20:47, 29 August 2011 (UTC)

{{proxycheck}} There is an open proxy (on 80, and I've saved this check on my computer for future reference if anyone wants it, quite interesting results) on this webhost, both of which are reasons to block. Hitting the /16.

Open proxy blocked -- DQ (t) (e) 18:46, 30 August 2011 (UTC)

IP 64.71.153.58

– This proxy check request is closed and will soon be archived by a bot.

64.71.153.58 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Admission of IP socking, blacklisted as an open proxy:

Blacklisted here: [3]
Admissions of IP socking here: [4], [5], [6]. JoeSperrazza (talk) 20:54, 29 August 2011 (UTC)

{{proxycheck}} (on 3128) found a proxy range, not liking the results across the board, hitting the /18. Results available for future reference.

Open proxy blocked -- DQ (t) (e) 18:45, 30 August 2011 (UTC)

81.170.234.99

– This proxy check request is closed and will soon be archived by a bot.

81.170.234.99 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: This message on Shirik's talk page seemed fishy, so I checked the IP using OverlordQ's Tor Check, and the node exits to Wikipedia. Logan _Talk ^{Contributions} 21:56, 5 September 2011 (UTC)

TorNode bot beat us to it. -- DQ (t) (e) 12:26, 8 September 2011 (UTC)

{{proxycheck}}. Blocked for longer. -- zzuuzz ^(talk) 15:16, 20 September 2011 (UTC)

109.127.86.52

– This proxy check request is closed and will soon be archived by a bot.

109.127.86.52 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Likely block evasion from RonaldMerchant (talk · contribs · deleted contribs · logs · filter log · block user · block log)--SarekOfVulcan (talk) 16:24, 22 August 2011 (UTC)

{{proxycheck}} My checks were ran incorrectly on this one. ~~:80 is open to nginx and from geolocation, this is a partly known area for proxies.~~ {{proxycheck|blocked}}. -- DQ (t) (e) 14:43, 26 August 2011 (UTC)

After-the-fact comment: it wasn't confirmed as an open-proxy [7], but was blocked as a sock (see block log) Chzz ► 00:23, 2 December 2011 (UTC)