This page is an archive. Do not edit the contents of this page. Please direct any additional comments to the current main page. |
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits at AN/I, and Geolocate marks it as a "confirmed proxy server" BMK ( talk) 22:05, 5 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Requested unblock. A global User asked me for help via private email. While logged in to their home Wikipedia, that user gets the following notice when attempting to go to the English Wikipedia:
Account creation from IP addresses in the range 190.77.0.0/16, which includes your IP address (190.77.172.147), has been blocked by NawlinWiki. The reason given by NawlinWiki is The IP address that you are currently using has been blocked because it is believed to be an open or anonymizing proxy. To prevent abuse, these proxies may be blocked from editing Wikipedia.
That's a big range with lots of collateral damage. WhoIs indicates this range is a dynamic pool of an ISP. Thanks in advance for your help. DocTree ( ʞlɐʇ· ʇuoɔ) WER 05:08, 7 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Seems to be related to a sockfarm I've been dealing with. Left me messages on my talk page of the same style as the SM. Crow Caw 22:59, 10 July 2015 (UTC) Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Geo locate says known proxy server. User self-identifies as Gabucho181 ( talk · contribs) who is known to use proxy servers for his edits. Current rash of vandalism from this IP. Geraldo Perez ( talk) 00:21, 16 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Geolocate says confirmed proxy server. Used by Gabucho181 ( talk · contribs) who only vandal edits through proxies. Geraldo Perez ( talk) 02:20, 16 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Another open proxy used for vandalism edit by Gabucho181 ( talk · contribs). Geo locate says known proxy server. Geraldo Perez ( talk) 21:22, 16 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Gabucho181 IP sock. Geolocate says confirmed proxy server. Geraldo Perez ( talk) 01:48, 17 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Requested unblock. PhilKnight ( talk) 21:42, 19 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. IP is apparently a network sharing device and appears on several black lists. PRECOCIOUS editing soon after a sock was blocked. The previous sock also edited from an open proxy.- Mr X 21:16, 21 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Anti-LGBT troll at Reference Desk
– This proxy check request is closed and will soon be archived by a bot.
Reason: Anti-LGBT troll at Reference Desk. This troll is known to use open proxies.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Anti-LGBT troll at Reference Desk. Troll is known to use open proxies.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Self-identified Gabucho181 socks. MO is to use open proxies for vandalism edits. Geraldo Perez ( talk) 05:52, 30 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits; showed up in a checkuser on a malicious user suspected to be a long-time nuisance. --jpgordon ::==( o ) 00:06, 1 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Sockpuppetry on Subway (restaurant) [1] Keri ( talk) 10:40, 2 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Per this and this Geraldo Perez ( talk) 19:12, 2 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Gabucho181 sock uses open proxies and this. Currently has a short sock block. Also per above looks to be in a range of IPs that could be ranged blocked. Geraldo Perez ( talk) 23:03, 2 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Hi there. I suspect this might be a proxy because it was recently used by a sock operator who historically has edited from Aberdeen, Scotland. This IP geolocates to Spain (ISP: Telefonica de Espana). Thanks! Cyphoidbomb ( talk) 17:59, 6 August 2015 (UTC) Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Previously blocked sock, using isp Choopa LLC See Wikipedia:WikiProject on open proxies/Requests#104.156.228.146 Keri ( talk) 14:50, 10 August 2015 (UTC)
Also 104.156.228.110 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Keri ( talk) 13:06, 13 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits IP editor only has interest in Pakistan-related articles, but IP geolocates to San Francisco, California, US. Not impossible, of course, but weird. They've flagged another user who edits primarily in Pakistan-related subjects as a sockpuppet. The user has also communicated with another editor in a foreign language. Again, not impossible for someone from San Francisco, but worth looking into. Thanks. Cyphoidbomb ( talk) 19:41, 10 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits, involved with logged-in editor suspected of COI [3]; host lookup says "Blue Coat Systems, Inc cloud services".
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits at article prone to autobio [4], host lookup said Gorilla Servers
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits associated with COI editor; host lookup at whatismyip.com says IP is a known proxy.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Used to evade active block in zhwiki, and the IP also edit here. The IP is from France but other IPs used by that zhwiki user is from Germany.-- GZWDer ( talk) 02:02, 20 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
I just reverted some vandalism which does not need any follow up, but when I looked at the IP's talk ( User talk:2C0F:F930:0:3:0:0:0:221) is saw a claim "This is a Tor exit node.2C0F:F930:0:3:0:0:0:221 (talk) 13:01, 16 August 2015". I'm hoping someone will take any action necessary, but it's a not a problem at the moment. Johnuniq ( talk) 02:33, 26 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. A persistent sockpuppet of user: Asdisis hiding behind a proxy. - Mr X 17:50, 27 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. Sock of Asdisis ( talk · contribs · logs). - Mr X 22:39, 27 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. WHOIS reports this is an open proxy from Zscaler. Brianhe ( talk) 04:38, 30 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Appears to be connected to company called Wittenstein that sells a product called Fitbone - they trying to edit war PROMO content about that product into several articles. Reported at COIN here and was referred to this board. Jytdog ( talk) 10:03, 31 August 2015 (UTC) Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits BMK ( talk) 13:09, 10 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Disruptive edit of WP:OR by a sockpuppet using OpenVPN as Open proxy. [7]
– This proxy check request is closed and will soon be archived by a bot.
Block reason given is Blocked_proxy for the entire range. A lot of collateral damage when such a wide range is blocked as an open proxy. If all of the ISP's servers are actually misconfigured and usable as open proxies, can a user or admin fluent in Spanish contact them to recommend better configuration and XFF? WhoIs shows CANTV Servicios, Venezuela located at Venezuela, Bolivarian Republic Of Caracas Cantv Servicios Venezuela. Thanks, DocTree ( ʞlɐʇ· ʇuoɔ) WER 17:51, 9 September 2015 (UTC)
Reason: Requested unblock.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits and traceroute goes through cogentco.com who describe theselves: "Cogent Data Centers also host Cogent's Utility Computing servers". — Brianhe ( talk) 23:12, 14 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
This IP is owned by Chevron Corporation, located in their San Ramon, California, office. It is reported as a confirmed open proxy. People operating the proxy have made personal attacks [8] and have violated the 1RR limitation set at the Abortion and mental health article. (All abortion topics have a 1RR limitation.) Since May 2015, other edits have been made by this proxy to disputed and controversial topics such as Conversion therapy (to convert gays) and Beginning of human personhood (a debate point in the abortion topic.) Binksternet ( talk) 06:29, 17 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. WHOIS→iWeb Technologies Inc.. Google→"iWeb: Cloud Hosting, Server Hosting & Hosted Solutions". Brianhe ( talk) 15:06, 21 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. - Mr X 12:01, 25 September 2015 (UTC)
This page is an archive. Do not edit the contents of this page. Please direct any additional comments to the current main page. |
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits at AN/I, and Geolocate marks it as a "confirmed proxy server" BMK ( talk) 22:05, 5 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Requested unblock. A global User asked me for help via private email. While logged in to their home Wikipedia, that user gets the following notice when attempting to go to the English Wikipedia:
Account creation from IP addresses in the range 190.77.0.0/16, which includes your IP address (190.77.172.147), has been blocked by NawlinWiki. The reason given by NawlinWiki is The IP address that you are currently using has been blocked because it is believed to be an open or anonymizing proxy. To prevent abuse, these proxies may be blocked from editing Wikipedia.
That's a big range with lots of collateral damage. WhoIs indicates this range is a dynamic pool of an ISP. Thanks in advance for your help. DocTree ( ʞlɐʇ· ʇuoɔ) WER 05:08, 7 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Seems to be related to a sockfarm I've been dealing with. Left me messages on my talk page of the same style as the SM. Crow Caw 22:59, 10 July 2015 (UTC) Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Geo locate says known proxy server. User self-identifies as Gabucho181 ( talk · contribs) who is known to use proxy servers for his edits. Current rash of vandalism from this IP. Geraldo Perez ( talk) 00:21, 16 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Geolocate says confirmed proxy server. Used by Gabucho181 ( talk · contribs) who only vandal edits through proxies. Geraldo Perez ( talk) 02:20, 16 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Another open proxy used for vandalism edit by Gabucho181 ( talk · contribs). Geo locate says known proxy server. Geraldo Perez ( talk) 21:22, 16 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Gabucho181 IP sock. Geolocate says confirmed proxy server. Geraldo Perez ( talk) 01:48, 17 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Requested unblock. PhilKnight ( talk) 21:42, 19 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. IP is apparently a network sharing device and appears on several black lists. PRECOCIOUS editing soon after a sock was blocked. The previous sock also edited from an open proxy.- Mr X 21:16, 21 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Anti-LGBT troll at Reference Desk
– This proxy check request is closed and will soon be archived by a bot.
Reason: Anti-LGBT troll at Reference Desk. This troll is known to use open proxies.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Anti-LGBT troll at Reference Desk. Troll is known to use open proxies.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Self-identified Gabucho181 socks. MO is to use open proxies for vandalism edits. Geraldo Perez ( talk) 05:52, 30 July 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits; showed up in a checkuser on a malicious user suspected to be a long-time nuisance. --jpgordon ::==( o ) 00:06, 1 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Sockpuppetry on Subway (restaurant) [1] Keri ( talk) 10:40, 2 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Per this and this Geraldo Perez ( talk) 19:12, 2 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Gabucho181 sock uses open proxies and this. Currently has a short sock block. Also per above looks to be in a range of IPs that could be ranged blocked. Geraldo Perez ( talk) 23:03, 2 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Hi there. I suspect this might be a proxy because it was recently used by a sock operator who historically has edited from Aberdeen, Scotland. This IP geolocates to Spain (ISP: Telefonica de Espana). Thanks! Cyphoidbomb ( talk) 17:59, 6 August 2015 (UTC) Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Previously blocked sock, using isp Choopa LLC See Wikipedia:WikiProject on open proxies/Requests#104.156.228.146 Keri ( talk) 14:50, 10 August 2015 (UTC)
Also 104.156.228.110 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan Keri ( talk) 13:06, 13 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits IP editor only has interest in Pakistan-related articles, but IP geolocates to San Francisco, California, US. Not impossible, of course, but weird. They've flagged another user who edits primarily in Pakistan-related subjects as a sockpuppet. The user has also communicated with another editor in a foreign language. Again, not impossible for someone from San Francisco, but worth looking into. Thanks. Cyphoidbomb ( talk) 19:41, 10 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits, involved with logged-in editor suspected of COI [3]; host lookup says "Blue Coat Systems, Inc cloud services".
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits at article prone to autobio [4], host lookup said Gorilla Servers
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits associated with COI editor; host lookup at whatismyip.com says IP is a known proxy.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Used to evade active block in zhwiki, and the IP also edit here. The IP is from France but other IPs used by that zhwiki user is from Germany.-- GZWDer ( talk) 02:02, 20 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
I just reverted some vandalism which does not need any follow up, but when I looked at the IP's talk ( User talk:2C0F:F930:0:3:0:0:0:221) is saw a claim "This is a Tor exit node.2C0F:F930:0:3:0:0:0:221 (talk) 13:01, 16 August 2015". I'm hoping someone will take any action necessary, but it's a not a problem at the moment. Johnuniq ( talk) 02:33, 26 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. A persistent sockpuppet of user: Asdisis hiding behind a proxy. - Mr X 17:50, 27 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. Sock of Asdisis ( talk · contribs · logs). - Mr X 22:39, 27 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. WHOIS reports this is an open proxy from Zscaler. Brianhe ( talk) 04:38, 30 August 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Appears to be connected to company called Wittenstein that sells a product called Fitbone - they trying to edit war PROMO content about that product into several articles. Reported at COIN here and was referred to this board. Jytdog ( talk) 10:03, 31 August 2015 (UTC) Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits BMK ( talk) 13:09, 10 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Disruptive edit of WP:OR by a sockpuppet using OpenVPN as Open proxy. [7]
– This proxy check request is closed and will soon be archived by a bot.
Block reason given is Blocked_proxy for the entire range. A lot of collateral damage when such a wide range is blocked as an open proxy. If all of the ISP's servers are actually misconfigured and usable as open proxies, can a user or admin fluent in Spanish contact them to recommend better configuration and XFF? WhoIs shows CANTV Servicios, Venezuela located at Venezuela, Bolivarian Republic Of Caracas Cantv Servicios Venezuela. Thanks, DocTree ( ʞlɐʇ· ʇuoɔ) WER 17:51, 9 September 2015 (UTC)
Reason: Requested unblock.
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits and traceroute goes through cogentco.com who describe theselves: "Cogent Data Centers also host Cogent's Utility Computing servers". — Brianhe ( talk) 23:12, 14 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
This IP is owned by Chevron Corporation, located in their San Ramon, California, office. It is reported as a confirmed open proxy. People operating the proxy have made personal attacks [8] and have violated the 1RR limitation set at the Abortion and mental health article. (All abortion topics have a 1RR limitation.) Since May 2015, other edits have been made by this proxy to disputed and controversial topics such as Conversion therapy (to convert gays) and Beginning of human personhood (a debate point in the abortion topic.) Binksternet ( talk) 06:29, 17 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. WHOIS→iWeb Technologies Inc.. Google→"iWeb: Cloud Hosting, Server Hosting & Hosted Solutions". Brianhe ( talk) 15:06, 21 September 2015 (UTC)
– This proxy check request is closed and will soon be archived by a bot.
Reason: Suspicious edits. - Mr X 12:01, 25 September 2015 (UTC)