Wikipedia:WikiProject on open proxies

From Wikipedia, the free encyclopedia
  (Redirected from Wikipedia:OP)
Jump to navigation Jump to search
WikiProject on open proxies

The WikiProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

  • If you've been blocked as an open proxy, please see: Help:blocked.
  • To report a proxy check or an incorrect block, see the #Reporting section.


Reporting[edit]

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I.
For block requests:

Verify that the following criterion has been met:

  • The IP has made abusive contributions within the past week
For unblock requests:

Verify that the following criteria has been met:

  • No current criteria
II.

For block requests Replace "IP" below with the IP address you are reporting.


For unblock requests Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.
Verified Users/Sysops Templates
  • IP is an open proxy {{Proxycheck|confirmed}} for confirmed open proxies and Tor exit nodes.
  •  Likely IP is an open proxy {{Proxycheck|likely}} for likely open proxies and Tor exit nodes.
  •  Possible IP is an open proxy {{Proxycheck|possible}} for possible open proxies and Tor exit nodes.
  •  Unlikely IP is an open proxy {{Proxycheck|unlikely}} for unlikely open proxies and Tor exit nodes.
  • Not currently an open proxy {{Proxycheck|unrelated}} for IP's confirmed not to be an open proxy or Tor exit node.
  • Inconclusive {{Proxycheck|inconclusive}} for IP's that are inconclusive.
  •  Declined to run a check {{Proxycheck|decline}} to decline a check.
  • Open proxy blocked {{Proxycheck|blocked}} for open proxies and Tor nodes that have been blocked. Please add this if you block the IP.

Requests[edit]


125.166.12.128[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

125.166.12.128 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: The socks4://103.144.209.98:3629 way for using the open proxy no longer works, and I was unable to find a different one. Martin Urbanec (talk) 09:34, 24 February 2022 (UTC)[reply]

38.130.248.0/22[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: Proxy/webhost (MR Networking, SRL) wizzito | say hello! 23:05, 4 April 2022 (UTC)[reply]

  • It's a little hard to tell what the ISP offers precisely, but this doesn't look like a dedicated hosting range. no Closing without action. --Blablubbs (talk) 10:58, 14 May 2022 (UTC)[reply]

103.214.112.0/23[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: webhost wizzito | say hello! 23:25, 8 April 2022 (UTC)[reply]

 Confirmed, the following IPs are unblocked nodes of FlyGateVPN:
Everything else is already covered by other webhost blocks. I would recommend hardblocking the following with {{colocationwebhost}}:
Best, MarioGom (talk) 23:44, 13 May 2022 (UTC)[reply]
 Done and closing. --Malcolmxl5 (talk) 07:49, 14 May 2022 (UTC)[reply]

175.143.95.18[edit]

Symbol question.svg – A user has requested a proxy check, but a proxy checker needs more information before making an decision whether or not to investigate.

Reason: I'm using a shadowsocks proxy. This is my IP address. — Preceding unsigned comment added by 175.143.95.18 (talkcontribs) 16:32, 6 May 2022 UTC) (UTC)

Do you have connection details or a reference to the proxy listing this came from? I cannot verify this externally. MarioGom (talk) 23:12, 13 May 2022 (UTC)[reply]

2001:2d8::/32, 2001:e60::/32, 2001:4430::/32 (IPv6)[edit]

Symbol comment vote.svg – This proxy check request is closed and will soon be archived by a bot.

Reason: South Korean mobile network operator's LTE open proxy bands. These bands have a lot of block logs on kowiki (Typical reasons are page pranks, page vandalism, and avoiding of block through multiple accounts and IPs within the bands: 2001:2d8::/32, 2001:e60::/32, 2001:4430::/32), and these bands are violating policies and guidelines and vandalising through multi-accounts and IP adresses abuse. Also, these bands are habitual multi-account mass creation band and in the blocking log, the reason for 2 bands is "Long-term abuse". 2001:2d8::/32 and 2001:e60::/32 band is currently blocked on kowiki for 3 days. (2d8 and e60) If unblocked, there is a risk of causing problems in various wiki projects including Wikipedia. Please permanently block editing user talk page too and globally lock these LTE bands with IP adress only. Goondae (talk) 11:43, 9 May 2022 (UTC)[reply]

  •  Additional information needed. @Goondae: I'm confused – is there any evidence these ranges have proxies on them? If yes, could you please provide it? If no, I'm afraid this is not the right venue; WP:ANI or m:SRG would probably be your best bet. On a sidenote, @Girth Summit: I've added {{anonblock}} to the block mentioned by the filer; I hope that's alright. --Blablubbs (talk) 20:30, 10 May 2022 (UTC)[reply]
    Thanks Blablubbs, I should have done that in the first place. Cheers Girth Summit (blether) 05:34, 11 May 2022 (UTC)[reply]
These LTE bands are proxyed by mobile network operators. These bands, which are IPv6, are more anonymous because the IP address changes just by turning LTE off and on. This easily circumvents penalties and abuses policies and guidelines (e.g. changing an IPv6 address by turning LTE off and on on a blocked IPv6 address). Therefore, these bands can be considered as open proxy. Goondae (talk) 12:15, 15 May 2022 (UTC)[reply]
By that logic, shouldn't we block most mobile networks IP addresses? I can do exactly the same thing and jump around on a /13 IPv4 covering an entire city of 1.5 million. Mako001 (C)  (T)  🇺🇦 12:30, 15 May 2022 (UTC)[reply]
  • While dynamic IPs may be harder block targets sometimes, that does not make them proxies. no Closing without action. --Blablubbs (talk) 12:58, 15 May 2022 (UTC)[reply]

Automated lists and tools[edit]

  • User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
  • ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
  • IPCheck is a tool that can help provide clues about potential open proxies.
  • Bullseye provides information about IPS, including clues about potential open proxies.
  • whois-referral is a generic WHOIS tool.
  • Range block finder finds present and past range blocks.

See also[edit]

Subpages
Related pages
Sister projects (defunct)