Wikipedia:WikiProject on open proxies

(Redirected from Wikipedia:OPP)

WikiProject on open proxies

The WikiProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

If you've been blocked as an open proxy, please see: Help:blocked.
To report a proxy check or an incorrect block, see the #Reporting section.

Open proxies may be blocked from editing

‹ The template Archives is being considered for merging. ›

Pre-2012 Archives

Old archives

New archives

Reporting

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

Before reporting any suspected open proxies here, please remember that not all vandals are open proxies and vandals should not get an automatic check here; remember that it takes the volunteers here about 5-10 minutes to give a request a thorough check.

File a new report here
I.	For block requests: Verify that the following criterion has been met: The IP has made abusive contributions within the past week For unblock requests: Verify that the following criteria has been met: No current criteria
II.	For block requests Replace "IP" below with the IP address you are reporting. For unblock requests Replace "IP" below with the IP address you are reporting.
III.	Fill out the resulting page and fill-in the requested information.
IV.	Save the page.

Verified Users/Sysops Templates

IP is an open proxy{{Proxycheck|confirmed}} for confirmed open proxies and TOR exit nodes.
Likely IP is an open proxy{{Proxycheck|likely}} for likely open proxies and TOR exit nodes.
Possible IP is an open proxy{{Proxycheck|possible}} for possible open proxies and TOR exit nodes.
Unlikely IP is an open proxy{{Proxycheck|unlikely}} for unlikely open proxies and TOR exit nodes.
Not currently an open proxy{{Proxycheck|unrelated}} for IP's confirmed not to be an open proxy or TOR exit node.
Inconclusive{{Proxycheck|inconclusive}} for IP's that are inconclusive.
Declined to run a check{{Proxycheck|decline}} to decline a check.
Open proxy blocked{{Proxycheck|blocked}} for open proxies and TOR nodes that have been blocked. Please add this if you block the IP.

Requests

This section is transcluded from /Requests. (edit | history)

‹ The template Archives is being considered for merging. ›

2012-present Archives

6, 7, 8, 9, 10, 11, 12, 13, 14, 15
16, 17, 18, 19, 20, 21, 22, 23, 24, 25
26, 27, 28, 29, 30, 31, 32, 33, 34, 35
36, 37, 38, 39, 40, 41, 42, 43, 44

Hide My Ip

– A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

Follow up to the previous Hide My IP report. These are unblocked IPs from their basic offering. MarioGom (talk) 19:54, 14 July 2021 (UTC)

All

Confirmed. I don't have time for a deep range dive, so there's probably more here.

Awaiting administrative action: Please hardblock the following for two years each:

103.25.57.0/24 (talk + · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs ·checkuser (log)) (Ransom IT VPS Hosting)
162.250.169.128/26 (talk + · tag · contribs ·filter log · WHOIS · RBLs · proxy check ·block user · block log · cross-wiki contribs ·checkuser (log)) (4goodhosting)
185.82.218.0/23 (talk + · tag · contribs ·filter log · WHOIS · RBLs · proxy check ·block user · block log · cross-wiki contribs ·checkuser (log)) (itldc hosting)
185.8.61.0/24 (talk + · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs ·checkuser (log)) (cloudhosting LV, they do colocation as well, but my rule of thumb is "ranges with proxies on them are usually fine to hardblock". The underlying 185.8.60.0/22 (talk + · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs ·checkuser (log)) could use a soft- or hardblock as well, as could most ranges in the ASN
194.5.212.0/24 (talk + · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs ·checkuser (log)) (M247)
45.84.1.0/24 (talk + · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs ·checkuser (log)) (PQ Hosting)
93.119.104.0/24 (talk + · tag · contribs ·filter log · WHOIS · RBLs · proxy check ·block user · block log · cross-wiki contribs ·checkuser (log)) (Virtono)
Other Virtono ranges:
- 45.15.20.0/24 (talk + · tag · contribs ·filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs · checkuser (log))
- 188.240.210.0/25 (talk + · tag ·contribs · filter log · WHOIS · RBLs ·proxy check · block user · block log ·cross-wiki contribs · checkuser (log))
- 2a0e:1d80::/48 (talk + · tag · contribs ·filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs · checkuser (log))
Thanks. --Blablubbs (talk) 13:58, 15 July 2021 (UTC)

I’ve blocked all of these except The underlying 185.8.60.0/22 (talk+ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs) could use a soft- or hardblock as well, as could most ranges in the ASN, which someone else needs to look into. --Malcolmxl5 (talk) 16:08, 1 August 2021 (UTC)

193.111.61.165

A user has requested a proxy check. A proxy checker will shortly look into the case.

193.111.61.165 · talk · contribs · block · log ·stalk · Robtex · ipcheck · Google · HTTP · geo ·whois · rangeblocks · spur · shodan

VPN Point. This exit node seems to be used by a cross-wiki UPE sockfarm (Çelebicihan). Other exit nodes seem to be caught by coloblocks already. See spur. Also there is a somewhat reliable fingerprint visible in shodan. MarioGom (talk) 18:05, 1 August 2021 (UTC)

M247

A user has requested a proxy check. A proxy checker will shortly look into the case.

185.252.221.0/24 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois
194.5.213.0/24 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois
194.5.214.0/24 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois
217.148.141.0/24 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois

A few M247 ranges that were not caught by ASNBlock and have active VPNs.. MarioGom (talk) 21:09, 1 August 2021 (UTC)

NordVPN (II)

A user has requested a proxy check. A proxy checker will shortly look into the case.

192.145.119.0/24 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois (all NordVPN, see whois, PacketHub)
185.65.50.0/24 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois (PacketHub, mostly blocked colo, NordVPN at 185.65.50.11, 185.65.50.17, 185.65.50.23, 185.65.50.29, 185.65.50.35)
195.216.219.0/25 · contribs · block · log · stalk ·Robtex · ipcheck · Google · whois (PacketHub, NordVPN at 195.216.219.121)
195.216.219.128/25 · contribs · block · log ·stalk · Robtex · ipcheck · Google · whois (PacketHub, NordVPN on many addresses from 195.216.219.129 to 195.216.219.155).

Unblocked NordVPN ranges. MarioGom (talk) 21:52, 1 August 2021 (UTC)

5.63.151.76

A user has requested a proxy check. A proxy checker will shortly look into the case.

5.63.151.76 · talk · contribs · block · log · stalk ·Robtex · ipcheck · Google · HTTP · geo ·whois · rangeblocks · spur · shodan uk.torguardvpnaccess.com

TorGuard exit node. 5.63.151.72/29 · contribs ·block · log · stalk · Robtex · ipcheck · Google ·whois is probably good for a webhost block. MarioGom (talk) 22:48, 1 August 2021 (UTC)

Automated lists and tools

User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
IPCheck is a tool that can help provide clues about potential open proxies.