Wikipedia:WikiProject on open proxies/Archives/Open/2010/October

109.169.63.141

109.169.63.141 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Open proxy. [1] --Gordonrox24 | ^Talk 19:13, 3 October 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 19:16, 3 October 2010 (UTC)

88.225.220.201

88.225.220.201 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: listed in WP:Open proxy detection Evidence: [2]. IP blocked last month for vandalism and remains open for abuse. Verified for myself that it is still open using browser settings. Sailsbystars (talk) 22:33, 3 October 2010 (UTC)

Verified open at 88.225.220.201:80, using my own browser settings. There is even a holding page at http://88.225.220.201, that is marked as a response from 'Mikrotik HttpProxy.' Suggest blocking for three years. I'll make a wild guess that these Mikrotik machines are being employed as humble routers in internet cafes or small companies, but their operators are too unsophisticated to secure them properly. (Or they don't care). See this dialog for a user complaining about the problem. Our MikroTik page suggests this is a low-end product. EdJohnston (talk) 03:47, 4 October 2010 (UTC)

{{opblocked}}, currently down but confirmed as above. -- zzuuzz ^(talk) 07:54, 6 October 2010 (UTC)

174.36.199.203

174.36.199.203 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits. Is a tor. [3] --Gordonrox24 | ^Talk 01:49, 10 October 2010 (UTC)

Since this is claimed as a Tor proxy via the official 'Tor' link above, and it exits to Wikipedia, I think the IP should be blocked long-term. EdJohnston (talk) 05:49, 10 October 2010 (UTC)

{{opblocked}} already rangeblocked, I'll block this one individually as well. Very few Tor nodes should be blocked long term, but this is one of them. -- zzuuzz ^(talk) 08:06, 10 October 2010 (UTC)

209.9.237.93

209.9.237.93 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Suspicious WHOIS data, IP was used to reinsert vandalism immediately after previous, nonproxy IP was blocked. Look at contribs, esp. history of the usertalk last edited. --Jayron32 06:13, 12 October 2010 (UTC)

[4]. open web proxy. Sailsbystars (talk) 11:15, 12 October 2010 (UTC)

Already blocked by zzuuzz. Sailsbystars (talk) 11:30, 12 October 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 17:57, 16 October 2010 (UTC)

78.129.226.81

78.129.226.81 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Open proxy. [5] --Gordonrox24 | ^Talk 17:32, 16 October 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 17:57, 16 October 2010 (UTC)

63.174.60.11

63.174.60.11 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Suspicious edits, such as to Fallout 2. Open proxy port on 3128. 63.174.60.11 (talk) 19:42, 18 October 2010 (UTC)

May have other ports as well. Previous comment was left by me verifying the proxy. Sailsbystars (talk) 19:44, 18 October 2010 (UTC)

Also seems to have been used as cannon fodder in edit-war at Teardrop trailer. Sailsbystars (talk) 19:49, 18 October 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 14:30, 29 October 2010 (UTC)

213.26.255.134

213.26.255.134 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

And another 213.26.255.134 (talk · contribs) with similar editing history [i.e. to 63.174.60.11]. Blacklists claim open proxy on 3128. Good grief!! Sailsbystars (talk) 20:09, 18 October 2010 (UTC)

Not currently open/up. Sailsbystars (talk) 21:13, 18 October 2010 (UTC)

• Zzuuzz has blocked this for one year as a proxy active on 3128. This report should be closed. EdJohnston (talk) 04:08, 29 October 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 14:30, 29 October 2010 (UTC)

200.61.26.135

200.61.26.135 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Google search confirms open proxy. Disruptive trolling at User talk:Favonian. Strange Passerby (talk • contribs) 14:27, 29 October 2010 (UTC)

{{opblocked}} (8080) -- zzuuzz ^(talk) 14:29, 29 October 2010 (UTC)

200.117.239.246

200.117.239.246 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

One in a series of attacks on User talk:Favonian. The others have been open proxies. Favonian (talk) 14:56, 29 October 2010 (UTC)

{{opblocked}} -- zzuuzz ^(talk) 14:59, 29 October 2010 (UTC)