Wikipedia:WikiProject on open proxies/Archives/Open/2011/January

IP 195.42.115.76

195.42.115.76 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: This IP blanked a page on the Czech Wikipedia. I suspect it to be a proxy because it's from Germany and one website for checking IPs confirms that this is a confirmed proxy server. However, this method proved not to be 100 % reliable in order to detect open proxies in the past. I don't know how to find out web proxy's URL. Would you, please, confirm that it's an open proxy so I can block it on Czech Wikipedia? Thanks a lot! --Wespecz (talk) 21:01, 23 December 2010 (UTC), sysop on Czech Wikipedia

Open proxy on 3128. Sailsbystars (talk) 21:16, 23 December 2010 (UTC)

{{opblocked}} -- Blocked six months per Sailsbystars confirmation, and per Procseebot blocking it on December 2. I can't check it right now because that IP address does not respond to ping. The other data includes Google results claiming this is both an open proxy and a spam server. This appears sufficient to justify a block. The user can request unblock if he comes back online as a non-proxy. EdJohnston (talk) 02:13, 8 January 2011 (UTC)

201.91.21.106

201.91.21.106 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Came up in OPD. Confirmed open proxy on 3128. Sailsbystars (talk) 04:02, 29 December 2010 (UTC)

{{opblocked}} one year per Sailsbystars report, and since Procseebot got it previously. Open on 3128. EdJohnston (talk) 03:07, 8 January 2011 (UTC)

122.183.210.199

122.183.210.199 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Found in OPD. Misconfigured router. Confirmed http-proxy on port 80. Vandalism. Sailsbystars (talk) 04:10, 29 December 2010 (UTC)

{{opblocked}}. Blocked six months per Sailsbystars report. The site at 'whatismyipaddress.com' also declares that this IP is a confirmed proxy. EdJohnston (talk) 02:42, 8 January 2011 (UTC)

200.165.90.210

200.165.90.210 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Previously blocked as an open proxy. Now there has been vandalism from the IP. Favonian (talk) 23:48, 7 January 2011 (UTC)

{{opblocked}} one year. Mikrotik server, providing proxy services on port 8080. Located in Brazil. Might be one of those internet cafe servers that is misconfigured. There is an email address in the whois entry for reporting abuse; anyone want to try that? If so it might help to know Portuguese. EdJohnston (talk) 01:51, 8 January 2011 (UTC)

202.108.50.69

202.108.50.69 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

202.108.50.70 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

202.108.50.71 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

202.108.50.73 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

202.108.50.75 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

202.108.50.76 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

202.108.50.77 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Used by same stalker reverting edits Guffydrawers (talk) 20:13, 7 January 2011 (UTC)

{{opblocked}} -- A number of these have been blocked in the past as open proxies by other admins, and two are currently blocked for that reason. At my request, User:Sailsbystars looked into this and gave a response here. Though I have not personally been able to activate these on port 80, I think the preponderance of evidence is good enough for two more years on the five IPs which are not currently blocked. EdJohnston (talk) 18:02, 8 January 2011 (UTC)

24.99.8.133

24.99.8.133 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Sock of Lorielpid RashersTierney (talk) 15:58, 4 December 2010 (UTC)

Unlikely to be a proxy. Seems to be a standard comcast account. The address is open on port 80, but returns a 503 error and nothing on the other standard proxy ports. I suspect it's just a dynamic IP rather than an open proxy. Sailsbystars (talk) 20:20, 4 December 2010 (UTC)

I'm not up to speed on the technicalities but Wikipedia:Open proxy detection has picked up on it as OP. RashersTierney (talk) 00:02, 5 December 2010 (UTC)

The Open Proxy Detection page uses fairly primitive techniques, so it gets some false positives. In this case it may not have been a false positive, as several websites list it as an open proxy. However, this particular ip is on a dynamic range and at the moment the ip isn't up at all. So either a.) it was never a proxy to begin with (somewhat unlikely, since there was a suspicious service running on port 80 when I checked earlier today) b.) it was a proxy but it switched addresses or c.) it was an open proxy that was blocked by the ISP (since I imagine open proxies are quite the bandwidth hogs....). Regardless of which scenario is the case, it does not appear to be at this time. Sailsbystars (talk) 03:01, 5 December 2010 (UTC)

{{opblocked}} -- six months by User:Alison. EdJohnston (talk) 05:34, 16 January 2011 (UTC)

222.124.190.117

222.124.190.117 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Previously blocked as an open proxy, not blocked for vandalism. Favonian (talk) 10:21, 12 January 2011 (UTC)

Currently down for me. Several attempts to get it to proxy failed. However, it appears as though it was a proxy at one point, as it appears in several proxy lists. Sailsbystars (talk) 15:59, 12 January 2011 (UTC)

{{opblocked}} -- one year by User:KrakatoaKatie. EdJohnston (talk) 05:32, 16 January 2011 (UTC)

123.231.252.162

123.231.252.162 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Originally reported by User:Tbhotch on WP:AIV

Confirmed open proxy on 8080. Sailsbystars (talk) 04:19, 16 January 2011 (UTC)

{{opblocked}} -- five years by User:Xymmax. EdJohnston (talk) 05:28, 16 January 2011 (UTC)

189.115.193.128

189.115.193.128 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Originally reported by User:Tbhotch on WP:AIV

Confirmed open proxy on 3128. Sailsbystars (talk) 04:19, 16 January 2011 (UTC)

{{opblocked}} -- five years by User:Xymmax. EdJohnston (talk) 05:29, 16 January 2011 (UTC)

List of proxies

AnchorFree, Inc.

69.22.172.124 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

69.22.172.59 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

69.31.70.129 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

69.31.71.169 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

173.245.84.15 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

173.245.84.21 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

173.245.84.47 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

173.245.85.66 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

TCP port 80 is open, software proxy for [1], these are new ranges that are poping up as of about 3 days ago. Probally more related to those ranges. -- DQ (t) ^{Merry Chrismas}_{and a Happy New Year!} 16:27, 21 December 2010 (UTC)

Blocked all. Shell ^babelfish 20:30, 1 January 2011 (UTC)

Using Firefox, standard proxy config:

:124.207.162.83 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Port 80 (China Beijing Beijing Teletron Telecom Engineering Co. Ltd) (Dead something that won't connect) :194.28.49.250 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Port 8080 (Poland Iwacom Sp. Z O.o) (Closed Proxy)

Additional ones found. -- DQ (t) ^{Merry Chrismas}_{and a Happy New Year!} 19:00, 21 December 2010 (UTC)

{{opblocked}} -- All IPs found to be proxies were blocked two years by Shell. EdJohnston (talk) 03:06, 19 January 2011 (UTC)

174.132.254.58

174.132.254.58 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: 174.132.254.58 is the address of http://cmyip.com. The web site tells you your IP address, but also post a link to an proxy service: http://www.hide-ip-soft.com/

Off-wiki evidence shows this is a proxy or an exit node of some anonymizer.—Preceding unsigned comment added by Petri Krohn (talk • contribs) 02:47, 5 November 2010 (UTC)

Any site associated with that company should be considered blockable on sight. According to the product description their product hops around 11 different IPs that they own and the two websites listed qualify as IPs that they own..... Sailsbystars (talk • contribs • email) 03:25, 5 November 2010 (UTC)

Already rangeblocked: 174.132.0.0/16 is blocked for several months. Sailsbystars (talk • contribs • email) 03:27, 5 November 2010 (UTC)

Aaaaand the 74.55.0.0/16 (where hide-ip-soft.com is hosted) is indef rangeblocked. Sailsbystars (talk • contribs • email) 03:29, 5 November 2010 (UTC)

Someone should should download the shareware trial version of the software and check the server addresses. The software requires Windows, I run Linux. -- Petri Krohn (talk) 07:55, 5 November 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 16:43, 19 January 2011 (UTC)

79.170.44.156

79.170.44.156 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Open port 80.--Gordonrox24 | ^Talk 20:47, 22 January 2011 (UTC)

Maybe.... it has an open port 8080, which is the standard port for http proxy. However, it doesn't actually proxy anything as far as I can tell either on 80 or 8080. Has it actually made any edits (but got caught in a filter or something)? Sailsbystars (talk) 15:52, 26 January 2011 (UTC)

{{opblocked}} Already caught by an indef rangeblock on 79.170.40.0/21 as a webhosting company known to host open proxies. Sailsbystars (talk) 16:54, 27 January 2011 (UTC)