User:ClueBot IV/WPA/Open

This is a partial archive of WP:OP. {| class="wikitable sortable" ! IP address !! user !! talk !! edits !! log !! scan !! block !! Notes || User:91.121.81.198 (Special:Contributions/91.121.81.198 | Special:Blockip/91.121.81.198) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=91.121.81.198) for the following types of proxies which I checked when they vandalized Pierre Alamire: Tor exit server. ClueBot 18:02, 3 November 2007 (UTC)
 * Tor. Prodego  talk  18:06, 3 November 2007 (UTC)

|| User:85.141.76.174 (Special:Contributions/85.141.76.174 | Special:Blockip/85.141.76.174) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=85.141.76.174) for the following types of proxies which I checked when they vandalized Peter Popoff:. ClueBot 12:48, 24 October 2007 (UTC)
 * - Tor exit node, blocked. Mr.  Z- man  17:30, 24 October 2007 (UTC)

|| I found the following types of open proxies on User:208.108.95.6 (Special:Contributions/208.108.95.6 | Special:Blockip/208.108.95.6) which I checked when they vandalized Elyria High School: HTTPGET. ClueBot 14:18, 23 October 2007 (UTC)


 * ClueBot IV 19:28, 23 October 2007 (UTC)


 * Blocked. AmiDaniel (talk) 00:24, 24 October 2007 (UTC)

|| : ClueBot IV 14:25, 23 October 2007 (UTC)


 * Blocked. AmiDaniel (talk) 00:27, 24 October 2007 (UTC)

|| I found the following types of open proxies on User:24.97.133.99 (Special:Contributions/24.97.133.99 | Special:Blockip/24.97.133.99) which I checked when they vandalized Weather: HTTPGET. ClueBot 18:46, 22 October 2007 (UTC)
 * ClueBot IV 18:53, 22 October 2007 (UTC)
 * ClueBot IV 19:11, 22 October 2007 (UTC)
 * Unable to connect through it, but highly suspicious open ports at 8000 and 8081 suggest it's quite hijackable. AmiDaniel (talk) 00:33, 24 October 2007 (UTC)

|| : port 8080 (blocked) -- zzuuzz (talk) 19:26, 22 October 2007 (UTC)

|| Reported on WP:ANI. Dean Wormer 03:55, 22 October 2007 (UTC)
 * ClueBot IV 04:21, 22 October 2007 (UTC)
 * port 3128 (blocked) -- zzuuzz (talk) 11:53, 22 October 2007 (UTC)

|| Reported on WP:ANI. Dean Wormer 03:51, 22 October 2007 (UTC)
 * ClueBot IV 04:21, 22 October 2007 (UTC)
 * Trojan. AmiDaniel (talk) 00:43, 24 October 2007 (UTC)

|| Reported on WP:ANI. Dean Wormer 03:48, 22 October 2007 (UTC)
 * ClueBot IV 04:21, 22 October 2007 (UTC)
 * Trojan. AmiDaniel (talk) 00:43, 24 October 2007 (UTC)

|| Checked it after I blocked it for BLP violations; could not get a reverse DNS. -Jéské ( Blah v^_^v ) 03:03, 20 October 2007 (UTC)
 * ClueBot IV 03:10, 20 October 2007 (UTC)
 * -- zzuuzz (talk) 03:20, 20 October 2007 (UTC)

|| User:85.25.147.96 (Special:Contributions/85.25.147.96 | Special:Blockip/85.25.147.96) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=85.25.147.96) for the following types of proxies which I checked when they vandalized Laura Richardson: Tor exit server. ClueBot 04:52, 19 October 2007 (UTC)
 * ClueBot IV 05:05, 19 October 2007 (UTC)
 * per ClueBot. Tor exit node.  -- Cobi(t 18:08, 19 October 2007 (UTC)

|| User:80.145.204.215 (Special:Contributions/80.145.204.215 | Special:Blockip/80.145.204.215) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=80.145.204.215) for the following types of proxies which I checked when they vandalized Laura Richardson:. ClueBot 04:47, 19 October 2007 (UTC)
 * ClueBot IV 04:54, 19 October 2007 (UTC)
 * per ClueBot. Tor exit node.  -- Cobi(t 18:08, 19 October 2007 (UTC)

|| I found the following types of open proxies on User:81.83.6.88 (Special:Contributions/81.83.6.88 | Special:Blockip/81.83.6.88) which I checked when they vandalized Firewall (networking): HTTPGET. ClueBot 13:37, 18 October 2007 (UTC)
 * ClueBot IV 13:47, 18 October 2007 (UTC)
 * per ClueBot and ClueBot IV. See ClueBot IV's report (above).  -- Cobi(t 18:08, 19 October 2007 (UTC)

|| I found the following types of open proxies on User:210.86.28.151 (Special:Contributions/210.86.28.151 | Special:Blockip/210.86.28.151) which I checked when they vandalized Christmas: HTTPGET. ClueBot 22:39, 17 October 2007 (UTC)
 * ClueBot IV 22:48, 17 October 2007 (UTC)
 * per ClueBot and ClueBot IV. See ClueBot IV's report (above).  -- Cobi(t 02:07, 18 October 2007 (UTC)

|| I found the following types of open proxies on User:166.127.1.216 (Special:Contributions/166.127.1.216 | Special:Blockip/166.127.1.216) which I checked when they vandalized Cuba: HTTPPOST. ClueBot 16:58, 16 October 2007 (UTC)
 * ClueBot IV 17:08, 16 October 2007 (UTC)
 * per ClueBot and ClueBot IV. See ClueBot IV's report (above).  -- Cobi(t 02:07, 18 October 2007 (UTC)

|| I found the following types of open proxies on User:203.149.78.242 (Special:Contributions/203.149.78.242 | Special:Blockip/203.149.78.242) which I checked when they vandalized Sparta: HTTPGET. ClueBot 04:03, 14 October 2007 (UTC)
 * ClueBot IV 04:13, 14 October 2007 (UTC)
 * See above. -- Cobi(t 04:15, 14 October 2007 (UTC)

|| I found the following types of open proxies on User:196.20.65.210 (Special:Contributions/196.20.65.210 | Special:Blockip/196.20.65.210) which I checked when they vandalized Chicken fried steak: HTTPGET. ClueBot 07:58, 13 October 2007 (UTC)
 * ClueBot IV 08:07, 13 October 2007 (UTC)
 * See above report. -- Cobi(t 08:10, 13 October 2007 (UTC)

|| User reported to AIV this susptected Tor node with HTTP exit enabled, found by using Tor. 66.238.233.150 03:22 Dreadstar †  05:30, 13 October 2007 (UTC)


 * ClueBot IV 05:40, 13 October 2007 (UTC)
 * - TOR exit server. -- Cobi(t 07:00, 13 October 2007 (UTC)

|| I found the following types of open proxies on User:207.108.244.3 (Special:Contributions/207.108.244.3 | Special:Blockip/207.108.244.3) which I checked when they vandalized Chili pepper: HTTPGET. ClueBot 15:59, 12 October 2007 (UTC)
 * ClueBot IV 16:07, 12 October 2007 (UTC)
 * Type=HTTPGET/HTTPPOST Port=8080 -- Cobi(t 07:03, 13 October 2007 (UTC)

|| I found the following types of open proxies on User:168.216.140.143 (Special:Contributions/168.216.140.143 | Special:Blockip/168.216.140.143) which I checked when they vandalized Greenland: HTTPGET. ClueBot 13:25, 11 October 2007 (UTC)
 * port 8080 (blocked). -- zzuuzz (talk) 13:30, 11 October 2007 (UTC)

|| I found the following types of open proxies on User:204.11.191.49 (Special:Contributions/204.11.191.49 | Special:Blockip/204.11.191.49) which I checked when they vandalized Culture of Ireland: HTTPGET. ClueBot 11:30, 10 October 2007 (UTC)
 * ClueBot IV 11:39, 10 October 2007 (UTC)
 * port 8080 (blocked). -- zzuuzz (talk) 11:48, 10 October 2007 (UTC)

|| User:83.254.208.138 (Special:Contributions/83.254.208.138 | Special:Blockip/83.254.208.138) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=83.254.208.138) for the following types of proxies which I checked when they vandalized Tsukihime, Lunar Legend: Tor exit server. ClueBot 04:40, 10 October 2007 (UTC)
 * ClueBot IV 04:48, 10 October 2007 (UTC)
 * tor exit node (blocked). -- zzuuzz (talk) 11:55, 10 October 2007 (UTC)

|| I found the following types of open proxies on User:216.113.225.154 (Special:Contributions/216.113.225.154 | Special:Blockip/216.113.225.154) which I checked when they vandalized Chivalry: HTTPPOST. ClueBot 12:25, 9 October 2007 (UTC)


 * ClueBot IV 12:33, 9 October 2007 (UTC)
 * See above note. -- Cobi(t 04:57, 10 October 2007 (UTC)

|| Reported to WP:AIV as "Tor node with HTTP exit enabled." --Ginkgo100talk 20:14, 8 October 2007 (UTC)
 * ClueBot IV 20:25, 8 October 2007 (UTC)
 * I didn't find it on any of the tor lists I check. -- Cobi(t 21:44, 8 October 2007 (UTC)
 * This IP has the usual Tor ports open, the lists should be checked in a day or two. -- zzuuzz (talk) 21:46, 8 October 2007 (UTC)
 * tor exit node polaris.plebia.org (blocked) -- zzuuzz (talk) 22:39, 8 October 2007 (UTC)

|| I found the following types of open proxies on User:199.245.188.252 (Special:Contributions/199.245.188.252 | Special:Blockip/199.245.188.252) which I checked when they vandalized John A. Ferguson High School: HTTPGET. ClueBot 12:16, 8 October 2007 (UTC)
 * ClueBot IV 12:22, 8 October 2007 (UTC)
 * port 3128 (blocked). -- zzuuzz (talk) 12:25, 8 October 2007 (UTC)

|| I found the following types of open proxies on User:121.247.115.123 (Special:Contributions/121.247.115.123 | Special:Blockip/121.247.115.123) which I checked when they vandalized Invisible Man (band): HTTPGET. ClueBot 05:05, 8 October 2007 (UTC)
 * ClueBot IV 05:11, 8 October 2007 (UTC)
 * port 8080 (blocked). -- zzuuzz (talk) 12:28, 8 October 2007 (UTC)

|| I found the following types of open proxies on User:212.11.191.67 (Special:Contributions/212.11.191.67 | Special:Blockip/212.11.191.67) which I checked when they vandalized Fort Worth Country Day School: HTTPPOST. ClueBot 22:29, 7 October 2007 (UTC)
 * ClueBot IV 22:36, 7 October 2007 (UTC)
 * port 80 (blocked). -- zzuuzz (talk) 12:31, 8 October 2007 (UTC)

|| Blocked on simple english wikipedia as open proxy. Oysterguitarist 17:36, 6 October 2007 (UTC)
 * ClueBot IV 17:49, 6 October 2007 (UTC)
 * . Mr.  Z- man  05:42, 7 October 2007 (UTC)

|| Blocked on simple english wikipedia as open proxy. Oysterguitarist 17:32, 6 October 2007 (UTC)
 * ClueBot IV 17:37, 6 October 2007 (UTC)
 * - Already blocked. Mr.  Z- man  05:47, 7 October 2007 (UTC)

|| Used by Ionas68224 to bypass indefinite block on Meta; in his post, he say s he's using an open proxy. Appears on this list of open proxies. -- A. B. (talk) 02:55, 6 October 2007 (UTC)
 * ClueBot IV 03:06, 6 October 2007 (UTC)
 * , blocked. Mr.  Z- man  05:57, 6 October 2007 (UTC)

|| User:74.140.108.135 (Special:Contributions/74.140.108.135 | Special:Blockip/74.140.108.135) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=74.140.108.135) for the following types of proxies which I checked when they vandalized Central High School (Saint Joseph, Missouri):. ClueBot 17:19, 5 October 2007 (UTC)
 * Tor exit node, blocked. Mr.  Z- man  17:22, 5 October 2007 (UTC)

|| User:65.182.170.146 (Special:Contributions/65.182.170.146 | Special:Blockip/65.182.170.146) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=65.182.170.146) for the following types of proxies which I checked when they vandalized Central High School (Saint Joseph, Missouri):. ClueBot 17:15, 5 October 2007 (UTC)
 * Tor exit node, blocked. Mr.  Z- man  17:22, 5 October 2007 (UTC)


 * ClueBot IV 17:20, 5 October 2007 (UTC)

|| I found the following types of open proxies on User:70.89.86.6 (Special:Contributions/70.89.86.6 | Special:Blockip/70.89.86.6) which I checked when they vandalized Paris: HTTP. ClueBot 16:30, 3 October 2007 (UTC)
 * ClueBot IV 16:38, 3 October 2007 (UTC)
 * It appears that this host is now offline or is firewalling my IP address. ClueBot IV's assessment may be wrong.  -- Cobi(t 16:41, 3 October 2007 (UTC)

C:\Program Files\Nmap>nmap -P0 -A -p 8080 70.89.86.6

Starting Nmap 4.20 ( http://insecure.org ) at 2007-10-03 13:04 Eastern Daylight Time Warning: OS detection for 70.89.86.6 will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port Warning: OS detection will be MUCH less reliable because we did not find at lea st 1 open and 1 closed TCP port Interesting ports on 70-89-86-6-smc-jax-fl.hfc.comcastbusiness.net (70.89.86.6):

PORT    STATE    SERVICE    VERSION 8080/tcp filtered http-proxy Device type: switch|broadband router|printer|load balancer|general purpose|route r Running: Bay Networks embedded, Billion embedded, Canon embedded, Cisco embedded , Linux 2.4.X|2.6.X, Microsoft Windows 2003/.NET|NT/2K/XP, RiverStone embedded, Sun Solaris 8 Too many fingerprints match this host to give specific OS details

OS and Service detection performed. Please report any incorrect results at http: //insecure.org/nmap/submit/. Nmap finished: 1 IP address (1 host up) scanned in 7.387 seconds
 * If it was an open proxy it's closed/filtered now. Mr.  Z- man  17:16, 3 October 2007 (UTC)
 * It's open now (blocked). -- zzuuzz (talk) 10:15, 5 October 2007 (UTC)

|| User:85.25.253.169 (Special:Contributions/85.25.253.169 | Special:Blockip/85.25.253.169) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=85.25.253.169) for the following types of proxies which I checked when they vandalized MUD:. ClueBot 14:52, 1 October 2007 (UTC)
 * tor exit node (blocked) -- zzuuzz (talk) 15:01, 1 October 2007 (UTC)

|| I found the following types of open proxies on User:168.8.190.253 (Special:Contributions/168.8.190.253 | Special:Blockip/168.8.190.253) which I checked when they vandalized Physical change: HTTPGET. ClueBot 13:13, 1 October 2007 (UTC)
 * ClueBot IV 13:22, 1 October 2007 (UTC)
 * -- Cobi(t 19:12, 1 October 2007 (UTC)

|| User:193.27.201.156 (Special:Contributions/193.27.201.156 | Special:Blockip/193.27.201.156) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=193.27.201.156) for the following types of proxies which I checked when they vandalized Philadelphia Phillies:. ClueBot 12:58, 1 October 2007 (UTC)
 * ClueBot IV 13:05, 1 October 2007 (UTC)
 * Tor exit node. -- Cobi(t 19:12, 1 October 2007 (UTC)

|| User:213.251.181.89 (Special:Contributions/213.251.181.89 | Special:Blockip/213.251.181.89) is listed on the AHBL (TOR) list (http://www.ahbl.org/tools/lookup.php?ip=213.251.181.89) for the following types of proxies which I checked when they vandalized HIV trial in Libya: Tor exit server. ClueBot 00:15, 1 October 2007 (UTC)
 * tor exit node (blocked) -- zzuuzz (talk) 00:17, 1 October 2007 (UTC)