Wikipedia:WikiProject on open proxies/Archives/Declined/2009/July

216.56.7.98

216.56.7.98 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Please check 216.56.7.98 - all of the edits are vandalism and look proxy-like. --B (talk) 19:44, 8 January 2009 (UTC)

 Clerk note: Report page has been deleted. ClueBot IV (talk) 19:51, 8 January 2009 (UTC)

{{decline}} Stale report. Please resubmit if editing continues. Q ^{T C} 21:42, 1 July 2009 (UTC)

88.112.28.172

88.112.28.172 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Blocked as open proxy in 2007, requests unblock. Still an open proxy?  Sandstein  16:32, 8 January 2009 (UTC)

 Clerk note: Report page has been deleted. ClueBot IV (talk) 16:37, 8 January 2009 (UTC)

{{decline}} Host unblocked Q ^{T C} 21:43, 1 July 2009 (UTC)

68.54.3.98

68.54.3.98 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan See how my entry below says an anon. user found the last TOR OP? That same anon. user was found on an exit TOR node. BTW, the Cluebot port scan isn't going to turn out right. ~ Troy (talk) 05:38, 1 January 2009 (UTC)

 Clerk note: Report page has been deleted. ClueBot IV (talk) 05:49, 1 January 2009 (UTC)

{{decline}} Handled by TorBlock. Q ^{T C} 21:44, 1 July 2009 (UTC)

86.45.222.9

86.45.222.9 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan User claims he is logging in from open proxies and claims that his IP address changes from time to time. Before I have a checkuser check all his IPs as open proxies, I want to see if the one we know about is an open proxy. If it isn't, then it's a safe bet the others are not either. Claim: [1]. It's common knowledge that in early December D. H. was also 86.45.222.9. davidwr/(talk)/(contribs)/(e-mail) 22:30, 23 December 2008 (UTC)

 Clerk note: Report page has been deleted. ClueBot IV (talk) 22:35, 23 December 2008 (UTC)

My portscan results:

Port Scan has started ...

Port Scanning host: 86.45.222.9

     Open TCP Port:     80             http
     Open TCP Port:     443            https
Port Scan has completed ...

Merits further investigation... Calvin 1998 ^(t·c) 02:59, 31 December 2008 (UTC)

{{decline}} Stale report, user has no recent edits. Q ^{T C} 21:45, 1 July 2009 (UTC)

121.9.230.162

121.9.230.162 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan This is one of the IPs named in WP:Suspected sock puppets/Yaneleksklus (3rd). A reverse DNS on this IP leads back to a Chinese outfit, guangzhou.gd.cn, which is associated with some spam domains, according to this Robtex lookup. I'm not sure if I interpreted the RDNS output correctly. This editor has abused quite a number of Belarus IPs that start with 82.209, but he also seems to use this one, based in China. It's the puzzlement that he would have access to a Chinese ISP, or host, that leads me to guess it's an open proxy. EdJohnston (talk) 04:16, 11 December 2008 (UTC)

At the moment I can't connect through port 80. This seems like a former open proxy as port 80 is now filtered same with 8080. --Kanonkas :  Talk  17:17, 12 December 2008 (UTC)

 Clerk note: Report page has been deleted. ClueBot IV (talk) 15:10, 17 December 2008 (UTC)

{{decline}} Stale report, user has no recent edits. Q ^{T C} 21:46, 1 July 2009 (UTC)

69.114.251.90

69.114.251.90 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Another User:Chidel IP sock from a suspected open proxy. The Rambling Man (talk) 19:32, 27 July 2009 (UTC)

{{decline}} Already blocked. Q ^{T C} 04:33, 30 July 2009 (UTC)

195.7.100.44

195.7.100.44 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: I assume another User:Chidel IP sock from a suspected open proxy. Fyunck(click) (talk) 19:48, 27 July 2009 (UTC)

{{decline}} Already blocked. Q ^{T C} 04:40, 30 July 2009 (UTC)

174.143.236.197

174.143.236.197 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Looks to be another open proxy.

{{decline}} Already blocked. Q ^{T C} 04:42, 30 July 2009 (UTC)