Wikipedia:WikiProject on open proxies/Archives/Inconclusive/2011/March

84.107.147.147

84.107.147.147 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits

As to the identity of the IP, well, the series of edits which one-sidedly resumed an old war between two banned editors tells a story and is itself the evidence. Anon IPs who make controversial edits are usually reverted on sight, and that would apply to the IPs of both banned editors. Banned editors who evade blocks and edit anyway can often do it for long periods of time as long as they abide by the rules and avoid controversy. It's still wrong, but it happens. In this case the edits were very controversial and reverted. If this is an open proxy, then it should be blocked. -- Brangifer (talk) 17:16, 15 February 2011 (UTC)

{{inconclusive}}. It's possible it's being used as a closed proxy, but it seems to be not open and only for use by one person. It's likely just a normal relatively static IP. -- zzuuzz ^(talk) 10:24, 5 March 2011 (UTC)

79.142.79.10

79.142.79.10 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Discovered open port 80/tcp on 79.142.79.10 --Gordonrox24 | ^Talk 19:02, 17 February 2011 (UTC)

Caught in en-wiki rangeblock on 79.142.64.0/20. Also the specific IP is blocked globally for cross-wiki vandalism. I will check later for to see if I can find the specific proxy configuration. Sailsbystars (talk) 19:57, 17 February 2011 (UTC)

Ok. Just as a note, the global block expires later today.--Gordonrox24 | ^Talk 20:22, 17 February 2011 (UTC)

So the ip/20 block which is currently blocked belongs to a hosting provider that has this to say about their services: "Due high amount of abuses on FORUM SPAM, our management has decided to stop providing services to such customers." And then goes on to talk about how they swear they will stop it. Sounds like a range we can safely leave blocked. It may not be an open proxy per se (I couldn't find an obvious one and it's not listed as one), but the range is clearly being abused for abusive webhosting. I don't know anything about global block policies though, this was actually the first one I've seen. Sailsbystars (talk) 04:13, 18 February 2011 (UTC)

{{inconclusive}}, per Sailsbystars this a rangeblock we're not lifting at this time. -- zzuuzz ^(talk) 10:29, 5 March 2011 (UTC)