Wikipedia:WikiProject on open proxies/Requests/Archives/18

80.67.172.1

 * Says they're not an open proxy. Daniel Case (talk) 14:34, 10 October 2014 (UTC)
 * They are no longer requesting unblock; apparently it was filed by a sock of a banned editor. Daniel Case (talk) 15:26, 10 October 2014 (UTC)

IP 5.32.67.139


Reason: Suspicious edits Reported at ANI for [//en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&diff=prev&oldid=629076925 abusive edit summaries]. According to cleantalk.org this particular IP has been found to be spamming at 101 sites. Suggests to me it may be an open proxy. Currently blocked two weeks for the abuse, but a proxy check might justify a longer block. EdJohnston (talk) 17:27, 10 October 2014 (UTC)
 * I have confirmed that it si an open proxy, as shown here. I have blocked the IP address for a year. The editor who uses the pseudonym "JamesBWatson" (talk) 20:54, 10 October 2014 (UTC)

156.62.9.20

 * Says they're not an open proxy. Daniel Case (talk) 02:28, 29 October 2014 (UTC)
 * I've unblocked, as the proxy seems gone. This is Auckland University of Technology IP, thus rapid reaction is not unusual. I hope ProxyBot will reblock if they resume (the entrance of the tunnel, 156.62.100.35, still has open ports) Materialscientist (talk) 02:54, 29 October 2014 (UTC)

202.28.25.118


Reason: This IP was blocked back in 2006. The whois says it's a inter-University ISP, so I think it might be just a shared IP rather than an open proxy. — Parent5446 ☯ ([ msg] email) 05:47, 4 November 2014 (UTC)
 * Unblocked. Materialscientist (talk) 23:42, 5 November 2014 (UTC)
 * Reblocked. Checked ports now, 1723 ppt is open (among a few others), which is a bad sign of a compromised computer. Materialscientist (talk) 21:59, 7 November 2014 (UTC)

173.196.129.100


Reason: This IP address has repeatedly used for vandalism, and is listed in the Composite Blocking List as being infected with Conficker according to http://cbl.abuseat.org/lookup.cgi?ip=173.196.129.100&.pubmit=Lookup. Could someone please confirm that this is some sort of zombie proxy? I have blocked it in order to stop the vandalism. Jesse Viviano (talk) 16:39, 5 November 2014 (UTC)
 * It's not in the CBL anymore, no surprise since this is a Road Runner Commercial IP and RR Security doesn't tolerate nonsense. Based on the edits, I'd say this more than likely is a shared IP with immature users (it's been schoolblocked before), and one of their computers got infected with a virus which spewed out a bunch of spam. PCHS-NJROTC  (Messages) 00:27, 4 February 2015 (UTC)
 * Stale; nothing on a quick scan. Kuru   (talk)  01:50, 31 May 2015 (UTC)

192.73.240.188


Reason: According to the WHOIS for this report, this IP address belongs to Host Virtual, which appears to be a data center. It has been used for comment spam according to Project Honey Pot according to http://www.projecthoneypot.org/ip_192.73.240.188. Its IP's reverse DNS resolves to "sea11.web.isheriff.com". I therefore believe this to be some sort of proxy. Jesse Viviano (talk) 21:40, 5 November 2014 (UTC)
 * See below. Materialscientist (talk) 23:38, 5 November 2014 (UTC)

192.73.240.188


Reason: Suspicious edits Reported at AIV -. http://whois.domaintools.com/192.73.240.188 leads one to http://www.hostvirtual.com/ Ron h jones (Talk) 21:44, 5 November 2014 (UTC)
 * Issued a general webhost block of 192.73.240.0/20. This particular IP shows a proxy-like behavior in CU logs. Materialscientist (talk) 23:38, 5 November 2014 (UTC)

217.115.65.15


Reason: Requested unblock via UTRS #12278.-- Jezebel's Ponyo bons mots 00:05, 27 November 2014 (UTC)
 * This IP is mentioned elsewhere on this page. proxy1-ext.my-it-solutions.net and 217.115.65.17 is proxy2-ext.my-it-solutions.net. At a guess this is a private server, not particularly open (no more than a school for example). I'd normally give this IP a green light, except there's a technically valid user block behind it. I doubt a full hardblock is necessary though, TBH. -- zzuuzz (talk) 08:23, 27 November 2014 (UTC)
 * . The IP remains blocked. -- zzuuzz (talk) 21:00, 26 January 2015 (UTC)

182.253.73.28


Reason: Requested unblock by Ayomaju. Block has a comment: 8080. עוד מישהו Od Mishehu 06:30, 8 December 2014 (UTC)
 * Comment: http://dronebl.org/lookup lists an open proxy, but the check seems rather stale (December 2013). No other blacklists reported by robtex. Host up with no open ports at this moment. I see no reason not to unblock, but am too unfamiliar with the process to do so myself for the moment. Martijn Hoekstra (talk) 10:50, 8 December 2014 (UTC)
 * Unblocked - don't see a proxy anymore. Materialscientist (talk) 11:07, 8 December 2014 (UTC)

85.230.127.244


Reason: Suspicious edits. in ja.wikipedia.org.
 * Comment: Reverse DNS yields
 * openports.info
 * furnituredepots.com
 * www.proxysmart.info
 * www.proxyget.info
 * www.proxyactive.info
 * proxyget.info
 * proxyactive.info
 * proxysmart.info


 * which definitely suggests a proxy. Then again, I'm only seeing open ports on 80 and 3306, which suggests nothing to worry about - but that may be temporary, with forwarded ports down. Martijn Hoekstra (talk) 10:40, 8 December 2014 (UTC)
 * Blocked. This is a type of proxy where you connect through a web page, not through a port. Materialscientist (talk) 10:46, 8 December 2014 (UTC)

216.246.109.198


Reason: Suspicious edits in ja.wikipedia.org.
 * Confirmed, blocked, thanks. Materialscientist (talk) 11:10, 9 December 2014 (UTC)

94.124.85.18


Reason: Suspicious edits in ja.wikipedia.org.
 * Confirmed, blocked, thanks. Materialscientist (talk) 10:53, 12 December 2014 (UTC)

2a01:4a0:11::92c5:98f0


Reason: Suspicious edits in ja.wikipedia.org.
 * Stale. Lots of open ports, but nothing obvious.  Kuru   (talk)  01:59, 31 May 2015 (UTC)

63.223.73.164


Reason: Suspicious edits in ja.wikipedia.org.
 * Confirmed, blocked, thanks. Materialscientist (talk) 11:40, 13 December 2014 (UTC)

103.246.18.22


Reason: Suspicious edits in ja.wikipedia.org.
 * Blocked, thanks. Materialscientist (talk) 10:50, 14 December 2014 (UTC)

59.151.103.45


Reason: Suspicious edits in ja.wikipedia.org.
 * Blocked, thanks. Materialscientist (talk) 11:25, 14 December 2014 (UTC)

62.109.25.136


Reason: Suspicious edits in ja.wikipedia.org. --HotKorokke (talk) 12:38, 22 December 2014 (UTC)
 * Confirmed, blocked, thanks. Materialscientist (talk) 12:47, 22 December 2014 (UTC)

162.220.8.43


Reason: Requested unblock, as it's my own VPS server (its rDNS points to zhaofeng.li) with no open proxies running on it (I do run a closed proxy for my friends to circumvent censorship). Although I have IPBE and can edit via the IP, but unblocking will make it easier in case someone else want to edit with my proxy. Please note that I control only this specific IP address, not the other ones in the subnet. Thank you for your time. Zhaofeng Li [ talk... contribs... ] 10:41, 28 December 2014 (UTC)
 * We can't unblock one IP on a range, we can only unblock the whole range locally on this wiki. Vituzzu globally blocked 162.220.8.0/21 for 5 years. If you wish to lift it locally, ask him about the reasons for such a long rangeblock. Materialscientist (talk) 10:48, 28 December 2014 (UTC)
 * Okay, will do. Happy holidays! Zhaofeng Li [ talk... contribs... ] 11:22, 28 December 2014 (UTC)

176.103.143.217


Reason: Suspicious edits in ja.wikipedia.org. --HotKorokke (talk) 12:24, 30 December 2014 (UTC)
 * Blocked, thanks. This is zpanelcp webhost, which is a kind of "open proxy". Materialscientist (talk) 12:36, 30 December 2014 (UTC)

162.218.211.128


Reason: Suspicious edits in ja.wikipedia.org. --HotKorokke (talk) 12:26, 30 December 2014 (UTC)
 * Blocked, thanks. This is vivalaproxy.com, and also a webhost. Materialscientist (talk) 12:39, 30 December 2014 (UTC)