Wikipedia:WikiProject on open proxies/Requests/Archives/6

173.236.254.46
close

This address is not an open proxy.

Reason: Requested unblock.
 * Where are these coming from? There is no active block here. --  DQ  (t)   (e)  13:24, 12 November 2011 (UTC)
 * Probably related to User talk:Pyrachi, which I'd previously declined. -- zzuuzz (talk) 10:49, 19 November 2011 (UTC)

188.72.128.0/17
close

Reason: Requested unblock.

User talk:Resad-9 is requesting an unblock. Bringing here for confirmation. -- Jayron  32  20:20, 6 December 2011 (UTC)
 * Without an individual IP address I would say . There are lots of web servers, proxies, malware sites, and other properly blacklisted IPs in that range. Please consider IPBE or ask the blocking admin. -- zzuuzz (talk) 22:11, 6 December 2011 (UTC)

194.63.239.232
close

Reason: Unblock has been requested at User talk:Ggia where user states that the IP is not an open proxy. ​—DoRD (talk)​ 13:18, 7 December 2011 (UTC)
 * This used to be assigned to a proxy in Norway, but now it looks like it's for a Greek high school and I can't get to the proxy nor see the signs of one. -- DQ  (t)   (e)  14:40, 8 December 2011 (UTC)

74.117.157.84
close

Reason: Escapeeyes again. --GenericBob (talk) 07:43, 3 December 2011 (UTC)
 * http open proxy . Additional proxies below. Sailsbystars (talk) 12:27, 3 December 2011 (UTC)

 Range Already blocked

Rangeblocked, but expires soon
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)

Blocked but not rangeblocked
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)

Unblocked/Need blocking
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * ✅ -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * Please explain this one a little further...i'm not seeing a proxy or webhost. -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * Sorry, that was a typo on my part. I coped this entire list by hand before a morning cup of coffee so it was inevitable I'd make at least one typo. :) Sailsbystars (talk) 14:01, 6 December 2011 (UTC)
 * And it's already rangeblocked. Sailsbystars (talk) 14:02, 6 December 2011 (UTC)
 * I'm not sure on the size of this webhost. Someone inform me? Single IP hit for now. -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * , but including here since it came up an WP:AN. We should probably keep an eye on this proxy provider.  Sailsbystars (talk) 13:58, 14 December 2011 (UTC)
 * Please explain this one a little further...i'm not seeing a proxy or webhost. -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * Sorry, that was a typo on my part. I coped this entire list by hand before a morning cup of coffee so it was inevitable I'd make at least one typo. :) Sailsbystars (talk) 14:01, 6 December 2011 (UTC)
 * And it's already rangeblocked. Sailsbystars (talk) 14:02, 6 December 2011 (UTC)
 * I'm not sure on the size of this webhost. Someone inform me? Single IP hit for now. -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * , but including here since it came up an WP:AN. We should probably keep an eye on this proxy provider.  Sailsbystars (talk) 13:58, 14 December 2011 (UTC)
 * -- DQ  (t)   (e)  10:52, 6 December 2011 (UTC)
 * , but including here since it came up an WP:AN. We should probably keep an eye on this proxy provider.  Sailsbystars (talk) 13:58, 14 December 2011 (UTC)
 * , but including here since it came up an WP:AN. We should probably keep an eye on this proxy provider.  Sailsbystars (talk) 13:58, 14 December 2011 (UTC)

65.189.246.48
close

Reason: Requested unblock. עוד מישהו Od Mishehu 10:34, 9 December 2011 (UTC)
 * I'm not seeing an open proxy there myself. However, according to the block log, I think this would be better dealt with as a checkuser block. -- zzuuzz (talk) 10:42, 9 December 2011 (UTC)
 * Dealt with by Tiptoety. -- DQ  (t)   (e)  04:46, 10 December 2011 (UTC)

115.127.24.116
close

Reason: Unblock requested at User talk:Bellayet and User talk:Djhsunny. ​—DoRD (talk)​ 17:10, 9 December 2011 (UTC)
 * Probably should be unblocked. Looks like it was a misconfigured router, but the configuration has been fixed now.  Sailsbystars (talk) 17:15, 9 December 2011 (UTC)
 * Modified by another admin. -- DQ  (t)   (e)  10:44, 13 December 2011 (UTC)

24.171.168.223
close


 * Reason: Private request.
 * Changed to just . IIRC this is a school network and nothing of a such proxy has existed as far as I see. Disabling the global block and forwarding to stewards. -- DQ  (t)   (e)  02:05, 12 December 2011 (UTC)

211.30.150.155
close


 * Saw this turn up on my stalklist and when I looked at it earlier, it didn't look like a proxy, but nothing to say I actually checked it that much. If it is a proxy, then we need to standardize the blocking on this one. -- DQ  (t)   (e)  04:31, 10 December 2011 (UTC)
 * -- DQ  (t)   (e)  13:01, 13 December 2011 (UTC)

IP101.108.9.143
checked

Other IPs making the same edits (see Sexual fetishism):

Just blocked for ongoing edit warring on the same articles (specifically, Conservative Party (UK)):.

Or, if you feel thusly inclined, figure out if this is User:Panelgets or not. Also, another editor proposed that is the same editor; I have my doubts, personally, and if these are indeed open proxies then a CU is useless. Thanks, Drmies (talk) 01:26, 13 December 2011 (UTC)
 * Spot checking here and there, finding a majority from Thailand, I would recommend you try for a CU, though one thing did come back that 94.31.198.161:8088 used (and may still be, its just refusing connections right now) as a proxy. -- DQ  (t)   (e)  13:15, 13 December 2011 (UTC)
 * It's one of these routers and it looks like it isn't unsecured. I'm guessing it's just normal IP hopping as most of the IPs belong to the same broadband provider rather than open proxy abuse. Sailsbystars (talk) 17:19, 13 December 2011 (UTC)

70.137.138.129
close

taking out material which is referenced (for example, this where he/she takes out reference and calls it "outdated". He/she is not in position to make such a judgement. Look at his/her other IP address Bastian (talk) 22:28, 13 December 2011 (UTC)

Reason: Suspicious edits, similar edits using IP addresses that are different
 * This looks like standard IP hopping. Rather than using an open proxy, this IP user appears to be resetting his or her modem and acquiring a new IP address, either in good faith or bad.  You may want to file a report at SPI if the use of multiple IPs is being used to circumvent the editorial process through WP:Votestacking or evading the 3rr rule, for example.  If not, it's a content dispute. try dispute resolution.  Sailsbystars (talk) 22:45, 13 December 2011 (UTC)

220.255.2.172
close

There is an IP unblock request at User talk:Maglame, referring to 220.255.2.172, which was blocked by ProcseeBot. The block log says ‎. JamesBWatson (talk) 10:27, 15 December 2011 (UTC)
 * , unblocked -- zzuuzz (talk) 11:28, 15 December 2011 (UTC)

50.16.108.39
proxycheckstatus

See AN3. Since whois shows that this IP belongs to Amazon AWS, it should count as a web server for our purposes. My understanding is that web servers are routinely blocked under the open proxy rules. Reporting the IP here so that others can check (a) is this rationale correct, (b) should the IP be hard blocked for a year. EdJohnston (talk) 15:22, 19 December 2011 (UTC)

Reason: Suspicious edits
 * Yep, it's AWS, and as good as an open anonymising proxy in most cases. There's a question mark about how long to block them for, since the IP addresses can be easily reassigned. Some huge range blocks would make more sense, but that would need careful consideration due to the inevitable collateral, and it's not a hugely problematic range. In any case, blocking a single IP for a year or more is unlikely to cause problems for non-proxy users. The user's other IPs are open proxies, btw. -- zzuuzz (talk) 16:05, 19 December 2011 (UTC)
 * This particular server is apparently used as a FreeBSD demo open to everyone. Sailsbystars (talk) 16:21, 19 December 2011 (UTC)

This same editor has also been stalking Radvo with this IP


 * Pass a Method  talk  17:39, 19 December 2011 (UTC)
 * Already rangeblocked ;) and a few others. -- zzuuzz (talk) 17:44, 19 December 2011 (UTC)
 * Impressive software o.0 Pass a Method   talk  19:35, 19 December 2011 (UTC)

he's back Pass a Method  talk  21:23, 19 December 2011 (UTC)
 * 
 * Yes, my software is impressive. Thank you. And, for the record, my 193. IPs were not proxies in the definitional sense; they were by way of a VPN. 68.171.97.132 (talk) 21:25, 19 December 2011 (UTC)
 * That's good enough for us. -- zzuuzz (talk) 21:27, 19 December 2011 (UTC)

more Pass a Method   talk  22:22, 19 December 2011 (UTC)
 * 
 * Sigh. 69.50.198.243:3128 Sailsbystars (talk) 22:29, 19 December 2011 (UTC)



He's back. The previous IP's traced to United States, but this one traces to Germany. Pass a Method  talk  02:01, 24 December 2011 (UTC)
 * No, I've had other IPs from other countries too. zzuuzz can confirm that. And how is reporting me here every time going to stop me from rejecting any edits of yours that I see need rejecting? Are they going to semi-protect every article you edit? Even if they do, what about the talk pages? They going to semi-protect those too? And, zzuuzz, how is it against policy to edit through a VPN? I bet a lot of good, long-time editors edit through VPNs. The policy is against open proxies. 82.165.35.26 (talk) 02:28, 24 December 2011 (UTC)
 * Do you mind telling me why you feel the need to track my edits? Pass a Method   talk  02:47, 24 December 2011 (UTC)
 * I've already told you why. You removed that portion from your talk page. I've told you recently by saying that you need to learn to use citation templates and that your edits are generally bad because you don't appear to have a good grasp on Wikipedia's rules or guidelines, with the exception of a few. You already know the main issue I have with your edits. They are either WP:OR, WP:Synthesis, or both, or completely unsupported by the references you add. You've been told this by others on your talk page. You should have tried to stop making such edits by now. I'm also suspicious of the reason that one editor called you a pedophile. 82.165.35.26 (talk) 02:56, 24 December 2011 (UTC)


 * I have almost 5000 edits to my name. If my edits were so bad i would have at east one level 2 warning notice from an admin, which i dont. Pass a Method   talk  03:12, 24 December 2011 (UTC)
 * A lot of editors' bad and/or dubious edits go unnoticed by administrators. Don't play that card. The point there is that you have been warned by other users, but you are still doing this kind of stuff. 82.165.35.26 (talk) 03:22, 24 December 2011 (UTC)


 * And why do you track edits?  Pass a Method   talk  03:30, 24 December 2011 (UTC)


 * I refuse to believe that you don't already know why, after what I said to you that one time. Maybe you should go back into your edit history and read what I said without outright saying it. He is a likely pedophile, and I'm not the only one who thinks that. 82.165.35.26 (talk) 03:41, 24 December 2011 (UTC)


 * Who else thinks that besides you? Pass a Method   talk  04:22, 24 December 2011 (UTC)
 * You could find that out (those who have hinted at it) with a little investigating. It doesn't take much to look through and examine one's contributions. Good grief. 82.165.35.26 (talk) 04:39, 24 December 2011 (UTC)

Several IPs attacking Od Mishehu's talk page
close

Reason: These IP addresses were involved with personal attacks on my talk page, which are typical of a specific vandal who uses open proxies. עוד מישהו Od Mishehu 17:26, 21 December 2011 (UTC)
 * That's 4chan, that is. Meatpuppets. A quick check says they are mostly dynamic and doesn't show any open proxies amongst it. -- zzuuzz (talk) 17:33, 21 December 2011 (UTC)
 * Nothing to do here, concur with zzuuzz.... Sailsbystars (talk) 02:49, 24 December 2011 (UTC)

194.117.22.71
close

Unblock request from User_talk:Jotomicron  Ron h jones (Talk) 19:51, 22 December 2011 (UTC)

Reason: Requested unblock.
 * Please go ahead and unblock. It looks like this was a proxy that was briefly misconfigured (which earned it a 2 month automatic block by Procseebot in November/early December), however I confirm that it does not proxy for me on any of the known open proxy configurations it has previously been open under.  It may be blocked again if it gets misconfigured again (this appears to have also happened in June, so hopefully the sysadmin in charge will have a clue and not let it happen yet again).  Sailsbystars (talk) 20:56, 22 December 2011 (UTC)
 * ✅ Unblocked by DQ. Sailsbystars (talk) 02:39, 24 December 2011 (UTC)

74.221.217.79
proxycheckstatus

This edit looks like my regular stalker Escapeeyes again, and the IP is suspicious. --GenericBob (talk) 10:18, 24 December 2011 (UTC)

46.182.123.30 & Co.



 * I have verified and (re)blocked some as tors, but can't check for http proxy (which they most likely are; my current firewall blocks even some tor check requests), thus listing here for possible rangeblocks/long blocks, not to forget :). Materialscientist (talk) 00:32, 2 December 2011 (UTC)
 * All blocked in some way shape or form by someone else. -- DQ  (t)   (e)  10:09, 6 December 2011 (UTC)

LPC evasion



 * Over at Sockpuppet investigations/LouisPhilippeCharles, all of these IPs came up. The edits are probably the same person, but the IPs geolocate all over the place, leading me to think that these are all open proxies. Can someone take a look? —  Hello Annyong  (say whaaat?!) 04:20, 15 December 2011 (UTC)
 * aside from behavioral evidence. All are DSL or Cable providers and none has any overt evidence of being a proxy that I can find.  In desperation, I tried portscans on several of the hosts and all of the ones I tried produced no results because they were down.  If these are part of a proxy network, it's a pretty insidious one.....  Sailsbystars (talk) 04:54, 15 December 2011 (UTC)

74.221.217.79


This edit looks like my regular stalker Escapeeyes again, and the IP is suspicious. --GenericBob (talk) 10:18, 24 December 2011 (UTC)
 * http://flash-proxy.info/ Open web proxy. Range is 74.221.208.0/20. Sailsbystars (talk) 14:33, 24 December 2011 (UTC)
 * Blocked by DQ. Sailsbystars (talk) 16:03, 31 December 2011 (UTC)

67.215.232.66


Reason: Requested unblock.

Unblock request at User talk:Kent Wang. Block log at. DrKiernan (talk) 13:24, 30 December 2011 (UTC)
 * Proxy hosting range and it's blocked globally so even if we were keen to unblock it (which we aren't) the request would have to be made on meta. Best course of action is to grant IPBE to user, which has already been done, so I'm marking this request as closed.  Sailsbystars (talk) 15:05, 30 December 2011 (UTC)

98.228.24.213


Reason: Requested unblock. User talk:Madman2001 expresses that he does not believe this is currently a proxy; has no idea why he is blocked. -- Jayron  32  06:02, 31 December 2011 (UTC)
 * One of the users neighbors likely has or had a virus as there was a zombie computer on this IP, but it looks like it was fixed or moved to a new ip about 2 weeks ago. Please unblock this IP.  Sailsbystars (talk) 15:52, 31 December 2011 (UTC)
 * Unblocked. Sailsbystars (talk) 14:24, 5 January 2012 (UTC)

213.98.69.99


Historically, the long-term serial sockpuppeteer and vandal has edited from the UK, using IPs associated with Tiscali UK and other English ISPs. A recent batch of trolling arrived from the address above, which (unusually) is linked to a Spanish ISP. Maybe it's an open proxy, maybe he's on vacation, maybe he moved to Spain. Thanks for looking into this one, TenOfAllTrades(talk) 13:50, 3 January 2012 (UTC)


 * Spain is a common winter vacation destination for Brits so there could be an easy explanation for this. While I can't find this listed as a proxy anywhere, I did a port scan and found it was open on telnet, ftp, and http ports, which is a bit weird for a not-webhost. I suspect it's a router device of some sort, perhaps a hotel or internet cafe.  Regardless, I couldn't make it proxy so I don't think there's anything we can do here...  Sailsbystars (talk) 14:43, 3 January 2012 (UTC)

217.114.215.250
proxycheckstatus

Reason: Suspicious edits
 * UK hosting provider, likely block evasion....   Seems to be part of this service, which offers a free trial of proxy-like services.  Hostname is actually vpn5.usaip.eu and range is 217.114.208.0/20.  Sailsbystars (talk) 15:42, 16 December 2011 (UTC)
 * Ughhhh, there are 18 different hosting ranges it uses, lets see how many we've already blocked Sailsbystars (talk) 15:54, 16 December 2011 (UTC)

Already rangeblocked

short term rangeblock (may need extending)

unblocked

ranges to block
 * 91.222.36.0/22 - Looks like someone's personal hosting range. Only one IP that made a test edit (so no to minimal collateral damage). 1-2 year block. "FOP Krakovetskiy Volodymir Vyacheslavovuch"
 * 175.45.25.21 - "Wharf telecom" - Appears to be ISP, not hosting provider. Block IP only for a year. Appears to be subleased by "saaki.net" within a bigger range (175.45.0.0/18), but I can't pin down the exact range and there'd probably be unacceptable amount of collateral.
 * 173.44.134.136/30 - Saaki.net - 1-2 yr block - no collateral
 * 204.12.247.216/30 - 1-2 year (this and the above look like wholesale ISP things which are too dynamic for a longer block) - no collateral
 * 83.170.64.0/18 - uk2 web hosting.... on looking at collateral, let's narrow it to 83.170.64.0/19 for five years, lots of nasty stuff on that range including previously blocked proxies, some collateral on the bigger range
 * 202.142.24.192 - Can't tell if dynamic or not, just block IP for a yearish "Chijun Network (Beijing)Consulting&Service Co.Ltd"
 * 67.21.82.0/26 - Global IP .info - 2 year block (this all belongs to directly to the proxy company!)
 * 94.125.176.0/21 - ATW internet hosting (atw.hu) 5 year - no collateral damage
 * 87.229.52.0/22 - deninet.hu web hosting - 5 year - no collateral damage

ranges not sure about
 * 85.17.0.0/16 - leaseweb hosting - 5 years? or not... lots of edits, check this out:
 * 184.22.224.0/19 - "LACA01-02" - I have no idea what this is......


 * I haven't done collateral checks on the ranges yet, but I don't expect to find much given that most are hosting providers.... Sailsbystars (talk) 02:11, 24 December 2011 (UTC)
 * Collateral info now added. Sailsbystars (talk) 02:25, 24 December 2011 (UTC)


 * ✅ dealt with this a while back. -- DQ  (ʞlɐʇ)  19:07, 20 January 2012 (UTC)

184.168.0.0/16
proxycheckstatus

Reason: The WHOIS of this range is to GoDaddy, a webhost.Jasper Deng (talk) 04:19, 30 December 2011 (UTC)
 * There are at least four currently blocked open proxies on the range, and out of the 65,000 IPs on that range, only 25 have ever edited wikipedia and only one or two have done so in a potentially constructive manner. Most look like they are/were proxies of one sort or another. I would support an extended (2-5 year) rangeblock.  Sailsbystars (talk) 15:52, 30 December 2011 (UTC)

139.30.45.41
proxycheckstatus

Unblock request at User talk:Simanowski  Ron h jones (Talk) 01:17, 5 January 2012 (UTC)

Reason: Requested unblock.
 * Looks clean to me. The user's talk page explanation agrees with my own analysis that it was briefly open in 2008 (misconfigured router), but was quickly fixed.  Safe to drop the block.  Sailsbystars (talk) 04:04, 5 January 2012 (UTC)
 * Unblocked by . Marking as closed.... Sailsbystars (talk) 14:11, 5 January 2012 (UTC)

122.194.11.208
proxycheckstatus

Reason: Has previously been blocked for two months as an open proxy. Shortly after the block expired, vandalism commenced. I have blocked it for six months, but seek confirmation for the rationale and length of the block. Favonian (talk) 16:06, 9 January 2012 (UTC)
 * Confirmed open proxy on port 808, so an informative block rationale would be "blocked proxy 122.194.11.208:808". A rangeblock isn't feasible, as it's on a /14 that looks to be an ISP, so I think that a six month extension as you've done is pretty much spot on.  Sailsbystars (talk) 15:16, 12 January 2012 (UTC)
 * Thank you! I've amended the block log and removed access by logged-in users. Favonian (talk) 18:05, 12 January 2012 (UTC)

67.159.5.178
proxycheckstatus

Says they're not an open proxy anymore. Daniel Case (talk) 05:41, 12 January 2012 (UTC)
 * Irrelevant. It's a rangeblock on the hosting company known to host open proxies and even more importantly, it's a checkuserblock.  Hell no on the unblock request. I found recent open proxies without much searching.  Tell 'em to kindly disable their proxy (open or not) to edit.  Sailsbystars (talk) 15:28, 12 January 2012 (UTC)
 * Oh, and just for good measure that particular IP has at least two web proxies hosted on it. Normally indef. ip/rangeblocks aren't done, but the one here looks to be well deserved.... Sailsbystars (talk) 16:21, 12 January 2012 (UTC)

64.90.40.46
proxycheckstatus

Escapeeyes again.
 * Confirmed web proxy freefacebookproxies.com. Recommend rangeblock.  Pretty much no contibutions for the last 3 years from the range except for this proxy (and one edit to the sandbox from ).  Range is 64.90.32.0/19, and recommend blocking for 2-5 years.  Sailsbystars (talk) 00:44, 18 January 2012 (UTC)
 * ✅ -- DQ  (ʞlɐʇ)  19:07, 20 January 2012 (UTC)

217.112.171.197


Reason: Requested unblock at User talk:Svick. To my untrained eyes, it appears to still be open on port 8080, but I'll leave it up to the experts for verification. Thanks ​—DoRD (talk)​ 16:50, 30 December 2011 (UTC)
 * This is very interesting... this looks like it was an open proxy as of very recently (i.e. a few hours ago). However, it doesn't proxy for me right now on either of the alleged proxy configurations I've seen.  I wouldn't unblock the IP right now, but I would grant IPBE to the user so they can get back to editting.  Sailsbystars (talk) 17:08, 30 December 2011 (UTC)
 * IPBE granted. — Edokter  ( talk ) — 17:58, 30 December 2011 (UTC)
 * Putting on hold for now. I (or another proxychecker) will check again in a few days to see if the IP is clear.  Sailsbystars (talk) 15:53, 31 December 2011 (UTC)
 * So this is a problem. It's still a proxy or zombie computer....  I'll leave a message on the user's talk page explaining. Sailsbystars (talk) 01:26, 18 January 2012 (UTC)

184.173.245.20


Reason: Escapeeyes again. nslookup gives "gator1842.hostgator.com" this time. --GenericBob (talk) 08:44, 25 December 2011 (UTC)
 * I looked into this briefly, can't find the exact proxy mechanism, although it clearly is a proxy because it's spammed a certain blue pill across wide swaths of the internet. It belongs to the range 184.172.0.0/15 which is "the Planet" hosting, who I thought we had already blocked a long time ago for repeated hosting of open proxies.... Sailsbystars (talk) 14:41, 25 December 2011 (UTC)
 * I can't actually block anything that size...and i'm not going to be blocking 256 /16s :P blocked the /18 though. -- DQ  (ʞlɐʇ)  11:06, 21 January 2012 (UTC)