Wikipedia:WikiProject on open proxies

WikiProject on open proxies

The WikiProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

  • If you've been blocked as an open proxy, please see: Help:blocked.
  • To report a proxy check or an incorrect block, see the #Reporting section.


ReportingEdit

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I.
For block requests:

Verify that the following criterion has been met:

  • The IP has made abusive contributions within the past week
For unblock requests:

Verify that the following criteria has been met:

  • No current criteria
II.

For block requests Replace "IP" below with the IP address you are reporting.


For unblock requests Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.
Verified Users/Sysops Templates
  • IP is an open proxy {{Proxycheck|confirmed}} for confirmed open proxies and Tor exit nodes.
  •  Likely IP is an open proxy {{Proxycheck|likely}} for likely open proxies and Tor exit nodes.
  •  Possible IP is an open proxy {{Proxycheck|possible}} for possible open proxies and Tor exit nodes.
  •  Unlikely IP is an open proxy {{Proxycheck|unlikely}} for unlikely open proxies and Tor exit nodes.
  • Not currently an open proxy {{Proxycheck|unrelated}} for IP's confirmed not to be an open proxy or Tor exit node.
  • Inconclusive {{Proxycheck|inconclusive}} for IP's that are inconclusive.
  •  Declined to run a check {{Proxycheck|decline}} to decline a check.
  • Open proxy blocked {{Proxycheck|blocked}} for open proxies and Tor nodes that have been blocked. Please add this if you block the IP.

RequestsEdit


Unwired BroadbandEdit

  – A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

23.227.96.0/19 · contribs · block · log · stalk · Robtex · whois · Google
104.200.32.0/20 · contribs · block · log · stalk · Robtex · whois · Google
104.247.128.0/20 · contribs · block · log · stalk · Robtex · whois · Google
104.247.144.0/21 · contribs · block · log · stalk · Robtex · whois · Google
198.210.32.0/19 · contribs · block · log · stalk · Robtex · whois · Google
209.54.32.0/20 · contribs · block · log · stalk · Robtex · whois · Google

Reason: These ranges no longer appear to be used for hosting; the ones listed here are registered to Unwired Broadband (AS33548), which is a residential and business ISP. wizzito | say hello! 20:54, 22 August 2022 (UTC)

I agree it looks like these blocks are now obsolete. It's been long since they were added, and they seem to have changed hands from hosting to broadband since.   Awaiting administrative action: Please, consider unblocking these. MarioGom (talk) 22:42, 17 November 2022 (UTC)

45.159.248.157Edit

  – This proxy check request is closed and will soon be archived by a bot.

Likely a proxy/compromised server per ipcheck Yeeno (talk) 06:03, 21 November 2022 (UTC)

  • Webhostblocked the /24. Closing. --Blablubbs (talk) 22:33, 3 December 2022 (UTC)

185.225.191.153Edit

  – A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

Reason: (IP address whois lookup returns to a Service offering Dedicated Servers (Mevspace) ) Matthew Tyler-Harrington (aka mth8412) (talk) 21:40, 29 November 2022 (UTC)

  Likely IP is an open proxy. The range (/24) is a data center. Probably a compromised MikroTik server, likely being used as a proxy. Please, consider a block for this IP. Thank you. MarioGom (talk) 10:18, 4 December 2022 (UTC)

163.123.172.0/24Edit

  – This proxy check request is closed and will soon be archived by a bot.

Reason: Datacenter / Webhost / Colocation center TheManInTheBlackHat (talk) 18:27, 30 November 2022 (UTC)

  Not currently an open proxy Enterprise VPN(-like?) solution, not open. —‍Mdaniels5757 (talk • contribs) 21:40, 4 December 2022 (UTC)

5.199.171.135Edit

  – A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

Reason: Obviously, a VPN from Lithuania. SpinnerLaserzthe2nd (talk) 08:44, 3 December 2022 (UTC)

  Confirmed. The IP is a TunnelBear VPN exit (see spur, shodan). The range (/22) is soft-blocked as a webhost, but this IP could use a hard block. Thank you. MarioGom (talk) 10:18, 4 December 2022 (UTC)

Automated lists and toolsEdit

  • User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
  • ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
  • IPCheck is a tool that can help provide clues about potential open proxies.
  • Bullseye provides information about IPS, including clues about potential open proxies.
  • whois-referral is a generic WHOIS tool.
  • Range block finder finds present and past range blocks.

See alsoEdit

Subpages
Related pages
Sister projects (defunct)