Wikipedia:WikiProject on open proxies/Archives/Inconclusive/2009/June

140.174.9.14

140.174.9.14 - talk - edits - block - log - current blocks - Robtex - whois - Tor - Google - HTTP - Hash.es This edit suggests a previously-blocked disruptive user may be using this proxy to get around his block. Is it open?

Clerk note: Report page has been deleted. ClueBot IV (talk) 14:19, 9 December 2008 (UTC)

{{inconclusive}} IP (port 9191) is currently an open proxy which exits at 64.55.144.29 (talk · contribs). Probably worth blocking without further confirmation under the DUCK clause. -- zzuuzz ^(talk) 14:31, 9 December 2008 (UTC)

According to http://www.robtex.com/as/as26642.html#a3, these IPs belong to AnchorFree. Their products are used solely for anonymizing. There's quite a bit of vandalism and socking from these ranges.

• 64.55.144.0/22 (block user · block log · WHOIS)
• 140.174.9.0/24 (block user · block log · WHOIS)
• 128.241.88.0/24 (block user · block log · WHOIS)
• 204.2.134.0/24 (block user · block log · WHOIS)
• 206.14.64.0/24 (block user · block log · WHOIS)
• 66.166.19.248/29 (block user · block log · WHOIS)
• 208.184.6.0/24 (block user · block log · WHOIS)
• 208.185.17.0/24 (block user · block log · WHOIS)
• 38.99.105.0/24 (block user · block log · WHOIS)

Spellcast (talk) 02:17, 10 December 2008 (UTC)

• • Spellcast has Blocked them all. Xclamation point 23:06, 15 December 2008 (UTC)

193.77.149.132

193.77.149.132 - talk - edits - block - log - current blocks - Robtex - whois - Tor - Google - HTTP - Hash.es

I found a recurring sockmaster using this IP from Slovenia.[1] There's some indication that this ISP, SIOL-NET, provides proxies for anonymous surfing.[2] I've blocked the individual IP for 72 hours, but if it's connected to an open proxy then a long term block and perhaps even a range block may be appropriate.   Will Beback  talk  22:30, 25 May 2009 (UTC)

{{inconclusive}} Host seems down. Q ^{T C} 21:24, 12 June 2009 (UTC)

66.102.237.41

66.102.237.41 - talk - edits - block - log - current blocks - Robtex - whois - Tor - Google - HTTP - Hash.es

IP address appears to have been used by User:Runtshit, and is also blocked on Commons for abusing multiple accounts. Whois and Google search results suggest this is a web server. —Snigbrook 23:21, 31 May 2009 (UTC)

{{inconclusive}} No proxy running, but does not discount a CGI proxy somewhere on the server. Q ^{T C} 21:26, 12 June 2009 (UTC)

61.99.38.227

61.99.38.227 - talk - edits - block - log - current blocks - Robtex - whois - Tor - Google - HTTP - Hash.es suspicious editsdeliberately altering his/her sig with another anon's address but who has same agenda and suspicious google result.--Caspian blue 04:25, 26 June 2009 (UTC)

{{inconclusive}} Host down. Will recheck. Q ^{T C} 01:35, 28 June 2009 (UTC)

112.162.197.118

112.162.197.118 - talk - edits - block - log - current blocks - Robtex - whois - Tor - Google - HTTP - Hash.es same reason above.--Caspian blue 04:34, 26 June 2009 (UTC)

{{inconclusive}} Host down, will recheck. Q ^{T C} 01:36, 28 June 2009 (UTC)