WikiProject on open proxies

The WikiProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

  • If you've been blocked as an open proxy, please see: Help:blocked.
  • To report a proxy check or an incorrect block, see the #Reporting section.
Proxyblock.png

Open proxies may be blocked from editing


Reporting

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I.
For block requests:

Verify that the following criterion has been met:

  • The IP has made abusive contributions within the past week
For unblock requests:

Verify that the following criteria has been met:

  • No current criteria
II.

For block requests Replace "IP" below with the IP address you are reporting.


For unblock requests Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.
Verified Users/Sysops Templates
  • IP is an open proxy ((Proxycheck|confirmed)) for confirmed open proxies and Tor exit nodes.
  •  Likely IP is an open proxy ((Proxycheck|likely)) for likely open proxies and Tor exit nodes.
  •  Possible IP is an open proxy ((Proxycheck|possible)) for possible open proxies and Tor exit nodes.
  •  Unlikely IP is an open proxy ((Proxycheck|unlikely)) for unlikely open proxies and Tor exit nodes.
  • Not currently an open proxy ((Proxycheck|unrelated)) for IP's confirmed not to be an open proxy or Tor exit node.
  • Inconclusive ((Proxycheck|inconclusive)) for IP's that are inconclusive.
  •  Declined to run a check ((Proxycheck|decline)) to decline a check.
  • Open proxy blocked ((Proxycheck|blocked)) for open proxies and Tor nodes that have been blocked. Please add this if you block the IP.

Requests

This section is transcluded from /Requests. (edit | history)


223.25.61.236

Symbol comment vote.svg
– This proxy check request is closed and will soon be archived by a bot.

Reason: suspicious edits at article recently abused by LTA & spur reports callback proxy ☆ Bri (talk) 15:18, 2 July 2022 (UTC)Reply[reply]

Not currently an open proxy. Since residential proxies often rotate quickly, it is possible it was a proxy when you reported, and it stopped acting as one now. Closing without action. MarioGom (talk) 19:35, 25 August 2022 (UTC)Reply[reply]

90.167.174.0/24 and 90.167.177.0/24

Symbol comment vote.svg
– This proxy check request is closed and will soon be archived by a bot.

Reason: The individual IPs listed above appear to be activity of some LTAs in the beauty pageant space in the last ten days, with the exception of one active in May and the first address which was active late last year. Just wanted a quick check on these for proxy use. The editing follows the pattern of LTAs believed to be in Southeast Asia, with topics related to that geography, not Basque region consistent with geolocation. ☆ Bri (talk) 18:41, 5 July 2022 (UTC)Reply[reply]

Inconclusive. Given the pattern you describe, it might be possible there's some proxy hopping around 90.167.160.0/19 · contribs · block · log · stalk · Robtex · whois · Google, but I saw no technical evidence. Looking at activity in Spanish Wikipedia, it looks like a crowded range with actual activity from Spain (some vandalism, maybe some school, but it looks activity not coming from a proxy). Closing without action. I would suggest reporting elsewhere for vandalism if disruption continues. MarioGom (talk) 11:20, 26 August 2022 (UTC)Reply[reply]

83.137.6.163

Symbol comment vote.svg
– This proxy check request is closed and will soon be archived by a bot.

83.137.6.163 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Looks to belong to a mobile operator, Lycamobile, could be softened? - RichT|C|E-Mail 18:53, 16 August 2022 (UTC)Reply[reply]

The IP was a P2P proxy at the time of the block. The block expired already. You can see some more info at ((Blocked p2p proxy)). Closing. MarioGom (talk) 11:22, 26 August 2022 (UTC)Reply[reply]

85.140.0.0/21

Symbol comment vote.svg
– This proxy check request is closed and will soon be archived by a bot.

Reason: A fairly active Russian ISP that's looking like a proxy network. Blocked from talk space for two years. Every IP in the contribution history that I’ve checked is flagged by Spur as belonging to a call-back proxy network and as a 'possible proxy'. Malcolmxl5 (talk) 12:51, 17 August 2022 (UTC)Reply[reply]

Unwired Broadband

Symbol wait old.png
A user has requested a proxy check. A proxy checker will shortly look into the case.

23.227.96.0/19 · contribs · block · log · stalk · Robtex · whois · Google
104.200.32.0/20 · contribs · block · log · stalk · Robtex · whois · Google
104.247.128.0/20 · contribs · block · log · stalk · Robtex · whois · Google
104.247.144.0/21 · contribs · block · log · stalk · Robtex · whois · Google
198.210.32.0/19 · contribs · block · log · stalk · Robtex · whois · Google
209.54.32.0/20 · contribs · block · log · stalk · Robtex · whois · Google

Reason: These ranges no longer appear to be used for hosting; the ones listed here are registered to Unwired Broadband (AS33548), which is a residential and business ISP. wizzito | say hello! 20:54, 22 August 2022 (UTC)Reply[reply]

Automated lists and tools

See also

Subpages
Related pages
Sister projects (defunct)