Wikipedia:WikiProject Open proxies/Archives/Open/2011/June

93.174.93.145

93.174.93.145 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: User:GameOn has told me on my talk page that this IP is an open proxy. Since I'm not familiar with the procedure for checking these, I thought it would be more efficient if someone else could check it. I've already blocked it to the end of May for vandalism. Thanks!  —SMALLJIM  11:30, 17 May 2011 (UTC)

Yep, and now (/24) rangeblocked long time. I'll leave this report here so we can look at the rest of 93.174.88.0/21. -- zzuuzz ^(talk) 11:53, 17 May 2011 (UTC)

zzuuzz, if you look at their http site, you should find a ton more with the following IPs:

1. 74.63.112.128/27 · contribs · block · log · stalk · Robtex · whois · Google
2. 67.159.56.160/29 · contribs · block · log · stalk · Robtex · whois · Google
3. 74.63.86.216/29 · contribs · block · log · stalk · Robtex · whois · Google
4. 66.90.73.223 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
5. 67.159.36.16/28 · contribs · block · log · stalk · Robtex · whois · Google
6. 95.154.230.252/30 · contribs · block · log · stalk · Robtex · whois · Google
7. 95.154.230.191 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
8. 67.159.5.242 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
9. 93.174.93.145 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

The ranges are compiled from individual IPs. -- DQ (t) (e) 11:56, 17 May 2011 (UTC)

All are adequately rangeblocked. 93.174.88.0/21 looks well dodgy but still needs a closer check before blocking. -- zzuuzz ^(talk) 12:06, 17 May 2011 (UTC)

Ahh..good. Didn't see the overlying ranges at first. :) -- DQ (t) (e) 12:15, 17 May 2011 (UTC)

You'll see them a lot easier when you're a sysop :) -- zzuuzz ^(talk) 12:17, 17 May 2011 (UTC)

Thanks guys - I'm glad we have experts :)  —SMALLJIM  13:23, 17 May 2011 (UTC)

{{opblocked}}, 93.174.88.0/21 rangeblocked, and all the others. -- zzuuzz ^(talk) 19:49, 2 June 2011 (UTC)

pt.wikt vandal

87.103.101.191 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

178.17.164.52 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

173.0.56.12 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

I'm not sure this is the right place to request this. A steward at meta directed me here, so let me try: at pt.wikt we have a very persistent vandal that has been using open proxies to evade a ban. Recently he has used the IPs 87.103.101.191, 178.17.164.52 and 173.0.56.12. I would like to determine if they are open proxies. How can I go about determining that? Thanks for any help.

--ValJor (talk) 22:55, 25 May 2011 (UTC)

87.103.101.191 is a mobile phone IP with Vodaphone. 178.17.164.52 & 173.0.56.12 are both web accessible proxies, many sites on those IPs, see Domaintools whois for list of sites. -- DQ (t) (e) 03:05, 26 May 2011 (UTC)

The magic URL for 173.0.56.12 is www.bypass-proxy.info. Looks like it has friends too.... The block it's on is 173.0.48.0/20.... and every IP with contribs in the range looks to be a proxy:

• 173.0.59.24 (talk · contribs · WHOIS) purpleunblocker.info
• 173.0.61.182 (talk · contribs · WHOIS) is a porn site
• 173.0.48.33 (talk · contribs · WHOIS) was also purpleunblocker.info at one point http://webdetail.org/www.purpleunblocker.info
• 173.0.49.38 (talk · contribs · WHOIS) is a blockedproxy
• 173.0.55.83 (talk · contribs · WHOIS) bypassproxy.net and others....
• 173.0.56.169 (talk · contribs · WHOIS) is the only edit on the entire block that isn't a blatantly obvious proxy or otherwise compromised system....

This clearly needs a long rangeblock, as the purpleunblocker apparently jumps IPs in the range. Unlinked because I got hit by the spam filter. :-P Sailsbystars (talk) 02:39, 27 May 2011 (UTC)

173.0.48.0/20 now rangeblocked here. -- zzuuzz ^(talk) 10:00, 27 May 2011 (UTC)

{{opblocked}} all done here. -- zzuuzz ^(talk) 19:42, 2 June 2011 (UTC)