93.174.93.145

93.174.93.145 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: User:GameOn has told me on my talk page that this IP is an open proxy. Since I'm not familiar with the procedure for checking these, I thought it would be more efficient if someone else could check it. I've already blocked it to the end of May for vandalism. Thanks!  —SMALLJIM  11:30, 17 May 2011 (UTC)

Yep, and now (/24) rangeblocked long time. I'll leave this report here so we can look at the rest of 93.174.88.0/21. -- zzuuzz (talk) 11:53, 17 May 2011 (UTC)
zzuuzz, if you look at their http site, you should find a ton more with the following IPs:
  1. 74.63.112.128/27 · contribs · block · log · stalk · Robtex · whois · Google
  2. 67.159.56.160/29 · contribs · block · log · stalk · Robtex · whois · Google
  3. 74.63.86.216/29 · contribs · block · log · stalk · Robtex · whois · Google
  4. 66.90.73.223 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  5. 67.159.36.16/28 · contribs · block · log · stalk · Robtex · whois · Google
  6. 95.154.230.252/30 · contribs · block · log · stalk · Robtex · whois · Google
  7. 95.154.230.191 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  8. 67.159.5.242 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  9. 93.174.93.145 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
The ranges are compiled from individual IPs. -- DQ (t) (e) 11:56, 17 May 2011 (UTC)
All are adequately rangeblocked. 93.174.88.0/21 looks well dodgy but still needs a closer check before blocking. -- zzuuzz (talk) 12:06, 17 May 2011 (UTC)
Ahh..good. Didn't see the overlying ranges at first. :) -- DQ (t) (e) 12:15, 17 May 2011 (UTC)
You'll see them a lot easier when you're a sysop :) -- zzuuzz (talk) 12:17, 17 May 2011 (UTC)
Thanks guys - I'm glad we have experts :)  —SMALLJIM  13:23, 17 May 2011 (UTC)
((opblocked)), 93.174.88.0/21 rangeblocked, and all the others. -- zzuuzz (talk) 19:49, 2 June 2011 (UTC)

pt.wikt vandal

87.103.101.191 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
178.17.164.52 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
173.0.56.12 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

I'm not sure this is the right place to request this. A steward at meta directed me here, so let me try: at pt.wikt we have a very persistent vandal that has been using open proxies to evade a ban. Recently he has used the IPs 87.103.101.191, 178.17.164.52 and 173.0.56.12. I would like to determine if they are open proxies. How can I go about determining that? Thanks for any help.

--ValJor (talk) 22:55, 25 May 2011 (UTC)

87.103.101.191 is a mobile phone IP with Vodaphone. 178.17.164.52 & 173.0.56.12 are both web accessible proxies, many sites on those IPs, see Domaintools whois for list of sites. -- DQ (t) (e) 03:05, 26 May 2011 (UTC)
The magic URL for 173.0.56.12 is www.bypass-proxy.info. Looks like it has friends too.... The block it's on is 173.0.48.0/20.... and every IP with contribs in the range looks to be a proxy:
This clearly needs a long rangeblock, as the purpleunblocker apparently jumps IPs in the range. Unlinked because I got hit by the spam filter. :-P Sailsbystars (talk) 02:39, 27 May 2011 (UTC)
173.0.48.0/20 now rangeblocked here. -- zzuuzz (talk) 10:00, 27 May 2011 (UTC)
((opblocked)) all done here. -- zzuuzz (talk) 19:42, 2 June 2011 (UTC)
More