Wikipedia:WikiProject on open proxies

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
WikiProject on open proxies

The WikiProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

  • If you've been blocked as an open proxy, please see: Help:blocked.
  • To report a proxy check or an incorrect block, see the #Reporting section.


Reporting[edit]

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I.
For block requests:

Verify that the following criterion has been met:

  • The IP has made abusive contributions within the past week
For unblock requests:

Verify that the following criteria has been met:

  • No current criteria
II.

For block requests Replace "IP" below with the IP address you are reporting.


For unblock requests Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.
Verified Users/Sysops Templates
  • IP is an open proxy {{Proxycheck|confirmed}} for confirmed open proxies and TOR exit nodes.
  •  Likely IP is an open proxy {{Proxycheck|likely}} for likely open proxies and TOR exit nodes.
  •  Possible IP is an open proxy {{Proxycheck|possible}} for possible open proxies and TOR exit nodes.
  •  Unlikely IP is an open proxy {{Proxycheck|unlikely}} for unlikely open proxies and TOR exit nodes.
  • Not currently an open proxy {{Proxycheck|unrelated}} for IP's confirmed not to be an open proxy or TOR exit node.
  • Inconclusive {{Proxycheck|inconclusive}} for IP's that are inconclusive.
  •  Declined to run a check {{Proxycheck|decline}} to decline a check.
  • Open proxy blocked {{Proxycheck|blocked}} for open proxies and TOR nodes that have been blocked. Please add this if you block the IP.

Requests[edit]


77.66.105.10[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

Reason: Webhost. Owned by Netgroup A/S, hosting and cloud service provider in Denmark. Flagged by db-ip, proxycheck.io, getipintel and IPQS. Previous blocks as colocationwebhost in log[1]. Malcolmxl5 (talk) 12:02, 9 November 2021 (UTC)

2A0A:C802:4:0:0:0:0:0/48[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: IP range belongs to webhosting/cloud service. Recently used for abuse. 2601:1C0:4401:24A0:C0D7:275F:595C:9A8A (talk) 18:18, 10 November 2021 (UTC)

Abuse?! sheesh, nothing abusive in the range at as far as I can see, but then again it's probably mostly me. Let's try a little WP:AGF, and maybe remember WP:NPA. Of course I have no idea what's going on with the logged-in edits but then again neither do you so...
I can't answer the technical questions here, not my area, however it is a free application that is anonymising so I suspect it's blockable. I also suspect that english monoglots are unlikely to be able to find this application or use it so it's unlikely to be a big risk. It may also be unavailable in some parts of the world where the editor base is concentrated, but that's mostly speculative based on some not at all recent travel experience with different apps.
Sorry to bother you Blablubbs, I told myself I wasn't going to create makework for anyone by spontaneously reporting every random IP I was assigned, but since we're here it might be best if you took a look. If this does become a recurring issue I am of course open to any suggestions you have to make things less awkward. For obvious reasons I won't be responding directly to this thread if the range is blockable, but you can be assured that I'll see your response. Regards, 2A0A:C802:4:1:0:0:0:34 (talk) 19:49, 10 November 2021 (UTC)
Upon review there was something weird going on the 20th of June, but I wouldn't necessarily call that recent, and it hasn't been repeated but it is a tad concerning, I don't think that increases the urgency here but I could see how someone could reasonably disagree. Regards, 2A0A:C802:4:1:0:0:0:34 (talk) 19:57, 10 November 2021 (UTC)
I believe you can request a block exemption so that you won't be affected by the block (see: Wikipedia:IP block exemption), although you will have to create an account first. 2601:1C0:4401:24A0:C0D7:275F:595C:9A8A (talk) 20:30, 10 November 2021 (UTC)
  • Gah, I had typed out a response to this but apparently forgot to post it. Tldr: It's a  Confirmed webhost and I blocked, along with some others, and whether the edits are constructive or not didn't play into that determination; I have no way of knowing what might happen with these ranges in the future, or what is currently happening on them through registered accounts. Closing. --Blablubbs (talk)
@2601:1C0:4401:24A0::/64 not happening, see meatball:LoginsAreEvil; I note you never did strike that last sentence, oh well. Regards, 62.78.92.89 (talk) 05:32, 13 November 2021 (UTC)

104.225.160.0/19[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: Registered to iboss, inc. Softblock needed on this one. Lots of vandalism coming from this IP address as well. 2601:1C0:4401:24A0:8093:DB9C:FC19:972F (talk) 21:18, 10 November 2021 (UTC)

  • Softblocked given the vandalism. Closing. --Blablubbs (talk) 20:39, 11 November 2021 (UTC)

105.112.191.250[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: Flagged by proxycheck.io and spur as an open proxy. Malcolmxl5 (talk) 01:36, 15 November 2021 (UTC)

  •  Confirmed (HTTP port 3128), blocked for a week. Thanks for reporting, closing. --Blablubbs (talk) 13:14, 15 November 2021 (UTC)

72.140.180.86[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: A Toronto-based Rogers IP, flagged by ipcheck as a proxy. This IP has an interest in the same geographic area as Ineedtostopforgetting (talk · contribs). Shodan says that port 7547 is open for the device using this IP. EdJohnston (talk) 17:42, 20 November 2021 (UTC)

  •  Confirmed, blocked, closing. Thanks for reporting. --Blablubbs (talk) 21:12, 20 November 2021 (UTC)

Automated lists and tools[edit]

  • User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
  • ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
  • IPCheck is a tool that can help provide clues about potential open proxies.

See also[edit]

Subpages
Related pages
Sister projects (defunct)