Wikipedia:WikiProject on open proxies/Requests/Archives/18

80.67.172.1

– This proxy check request is closed and will soon be archived by a bot.

80.67.172.1 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Says they're not an open proxy. Daniel Case (talk) 14:34, 10 October 2014 (UTC)

They are no longer requesting unblock; apparently it was filed by a sock of a banned editor. Daniel Case (talk) 15:26, 10 October 2014 (UTC)

IP 5.32.67.139

– This proxy check request is closed and will soon be archived by a bot.

5.32.67.139 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits
Reported at ANI for abusive edit summaries. According to cleantalk.org this particular IP has been found to be spamming at 101 sites. Suggests to me it may be an open proxy. Currently blocked two weeks for the abuse, but a proxy check might justify a longer block. EdJohnston (talk) 17:27, 10 October 2014 (UTC)

I have confirmed that it si an open proxy, as shown here. I have blocked the IP address for a year. The editor who uses the pseudonym "JamesBWatson" (talk) 20:54, 10 October 2014 (UTC)

156.62.9.20

– This proxy check request is closed and will soon be archived by a bot.

156.62.9.20 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Says they're not an open proxy. Daniel Case (talk) 02:28, 29 October 2014 (UTC)

I've unblocked, as the proxy seems gone. This is Auckland University of Technology IP, thus rapid reaction is not unusual. I hope ProxyBot will reblock if they resume (the entrance of the tunnel, 156.62.100.35, still has open ports) Materialscientist (talk) 02:54, 29 October 2014 (UTC)

202.28.25.118

– This proxy check request is closed and will soon be archived by a bot.

202.28.25.118 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: This IP was blocked back in 2006. The whois says it's a inter-University ISP, so I think it might be just a shared IP rather than an open proxy. — Parent5446 ☯ ^{(msg email)} 05:47, 4 November 2014 (UTC)

Unblocked. Materialscientist (talk) 23:42, 5 November 2014 (UTC)

Reblocked. Checked ports now, 1723 ppt is open (among a few others), which is a bad sign of a compromised computer. Materialscientist (talk) 21:59, 7 November 2014 (UTC)

173.196.129.100

– This proxy check request is closed and will soon be archived by a bot.

173.196.129.100 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: This IP address has repeatedly used for vandalism, and is listed in the Composite Blocking List as being infected with Conficker according to http://cbl.abuseat.org/lookup.cgi?ip=173.196.129.100&.pubmit=Lookup . Could someone please confirm that this is some sort of zombie proxy? I have blocked it in order to stop the vandalism. Jesse Viviano (talk) 16:39, 5 November 2014 (UTC)

It's not in the CBL anymore, no surprise since this is a Road Runner Commercial IP and RR Security doesn't tolerate nonsense. Based on the edits, I'd say this more than likely is a shared IP with immature users (it's been {{schoolblock}}ed before), and one of their computers got infected with a virus which spewed out a bunch of spam. PCHS-NJROTC ^(Messages) 00:27, 4 February 2015 (UTC)

Stale; nothing on a quick scan. Kuru (talk) 01:50, 31 May 2015 (UTC)

192.73.240.188

– This proxy check request is closed and will soon be archived by a bot.

192.73.240.188 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: According to the WHOIS for this report, this IP address belongs to Host Virtual, which appears to be a data center. It has been used for comment spam according to Project Honey Pot according to http://www.projecthoneypot.org/ip_192.73.240.188 . Its IP's reverse DNS resolves to "sea11.web.isheriff.com". I therefore believe this to be some sort of proxy. Jesse Viviano (talk) 21:40, 5 November 2014 (UTC)

See below. Materialscientist (talk) 23:38, 5 November 2014 (UTC)

192.73.240.188

– This proxy check request is closed and will soon be archived by a bot.

192.73.240.188 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits Reported at AIV - 198.96.22.242 (talk · contribs · deleted contribs · edit filter log · WHOIS · RDNS · RBLs · http · block user · block log) – On Call of Duty: Advanced Warfare: vandalism after final warning. May need a range block on 241-.254 as appears to be hopping around this subnet. Amortias (T)(C) 21:29, 5 November 2014 (UTC). http://whois.domaintools.com/192.73.240.188 leads one to http://www.hostvirtual.com/ Ronhjones  ^(Talk) 21:44, 5 November 2014 (UTC)

Issued a general webhost block of 192.73.240.0/20. This particular IP shows a proxy-like behavior in CU logs. Materialscientist (talk) 23:38, 5 November 2014 (UTC)

217.115.65.15

– This proxy check request is closed and will soon be archived by a bot.

217.115.65.15 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock via UTRS #12278.--Jezebel's Ponyo^{bons mots} 00:05, 27 November 2014 (UTC)

This IP is mentioned elsewhere on this page. proxy1-ext.my-it-solutions.net and 217.115.65.17 is proxy2-ext.my-it-solutions.net. At a guess this is a private server, not particularly open (no more than a school for example). I'd normally give this IP a green light, except there's a technically valid user block behind it. I doubt a full hardblock is necessary though, TBH. -- zzuuzz ^(talk) 08:23, 27 November 2014 (UTC)

Not an open proxy. The IP remains blocked. -- zzuuzz ^(talk) 21:00, 26 January 2015 (UTC)

182.253.73.28

– This proxy check request is closed and will soon be archived by a bot.

182.253.73.28 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock by Ayomaju. Block has a comment: 8080. עוד מישהו Od Mishehu 06:30, 8 December 2014 (UTC)

Comment: http://dronebl.org/lookup lists an open proxy, but the check seems rather stale (December 2013). No other blacklists reported by robtex. Host up with no open ports at this moment. I see no reason not to unblock, but am too unfamiliar with the process to do so myself for the moment. Martijn Hoekstra (talk) 10:50, 8 December 2014 (UTC)

Unblocked - don't see a proxy anymore. Materialscientist (talk) 11:07, 8 December 2014 (UTC)

85.230.127.244

– This proxy check request is closed and will soon be archived by a bot.

85.230.127.244 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits. in ja.wikipedia.org .

• Comment: Reverse DNS yields
  • openports.info
  • furnituredepots.com
  • www.proxysmart.info
  • www.proxyget.info
  • www.proxyactive.info
  • proxyget.info
  • proxyactive.info
  • proxysmart.info

which definitely suggests a proxy. Then again, I'm only seeing open ports on 80 and 3306, which suggests nothing to worry about - but that may be temporary, with forwarded ports down. Martijn Hoekstra (talk) 10:40, 8 December 2014 (UTC)

Blocked. This is a type of proxy where you connect through a web page, not through a port. Materialscientist (talk) 10:46, 8 December 2014 (UTC)

216.246.109.198

– This proxy check request is closed and will soon be archived by a bot.

216.246.109.198 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org .

Confirmed, blocked, thanks. Materialscientist (talk) 11:10, 9 December 2014 (UTC)

94.124.85.18

– This proxy check request is closed and will soon be archived by a bot.

94.124.85.18 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org .

Confirmed, blocked, thanks. Materialscientist (talk) 10:53, 12 December 2014 (UTC)

2a01:4a0:11::92c5:98f0

– This proxy check request is closed and will soon be archived by a bot.

2a01:4a0:11::92c5:98f0 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org .

Stale. Lots of open ports, but nothing obvious. Kuru (talk) 01:59, 31 May 2015 (UTC)

63.223.73.164

– This proxy check request is closed and will soon be archived by a bot.

63.223.73.164 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org .

Confirmed, blocked, thanks. Materialscientist (talk) 11:40, 13 December 2014 (UTC)

103.246.18.22

– This proxy check request is closed and will soon be archived by a bot.

103.246.18.22 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org .

Blocked, thanks. Materialscientist (talk) 10:50, 14 December 2014 (UTC)

59.151.103.45

– This proxy check request is closed and will soon be archived by a bot.

59.151.103.45 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org .

Blocked, thanks. Materialscientist (talk) 11:25, 14 December 2014 (UTC)

62.109.25.136

– This proxy check request is closed and will soon be archived by a bot.

62.109.25.136 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org . --HotKorokke (talk) 12:38, 22 December 2014 (UTC)

Confirmed, blocked, thanks. Materialscientist (talk) 12:47, 22 December 2014 (UTC)

162.220.8.43

– This proxy check request is closed and will soon be archived by a bot.

162.220.8.43 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Requested unblock, as it's my own VPS server (its rDNS points to zhaofeng.li) with no open proxies running on it (I do run a closed proxy for my friends to circumvent censorship). Although I have IPBE and can edit via the IP, but unblocking will make it easier in case someone else want to edit with my proxy. Please note that I control only this specific IP address, not the other ones in the subnet. Thank you for your time. Zhaofeng Li [talk... contribs...] 10:41, 28 December 2014 (UTC)

We can't unblock one IP on a range, we can only unblock the whole range locally on this wiki. Vituzzu globally blocked 162.220.8.0/21 for 5 years. If you wish to lift it locally, ask him about the reasons for such a long rangeblock. Materialscientist (talk) 10:48, 28 December 2014 (UTC)

Okay, will do. Happy holidays! Zhaofeng Li [talk... contribs...] 11:22, 28 December 2014 (UTC)

176.103.143.217

– This proxy check request is closed and will soon be archived by a bot.

176.103.143.217 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org . --HotKorokke (talk) 12:24, 30 December 2014 (UTC)

Blocked, thanks. This is zpanelcp webhost, which is a kind of "open proxy". Materialscientist (talk) 12:36, 30 December 2014 (UTC)

162.218.211.128

– This proxy check request is closed and will soon be archived by a bot.

162.218.211.128 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits in ja.wikipedia.org . --HotKorokke (talk) 12:26, 30 December 2014 (UTC)

Blocked, thanks. This is vivalaproxy.com, and also a webhost. Materialscientist (talk) 12:39, 30 December 2014 (UTC)