WikiProject on open proxies |
---|
The WikiProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.
|
Reporting
Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.
File a new report here | ||
I. | For block requests:
Verify that the following criterion has been met:
For unblock requests:
Verify that the following criteria has been met:
| |
II. | For block requests
Replace "IP" below with the IP address you are reporting. For unblock requests
Replace "IP" below with the IP address you are reporting. | |
III. | Fill out the resulting page and fill-in the requested information. | |
IV. | Save the page. |
Verified Users/Sysops Templates
|
---|
|
Requests
125.166.12.128
A user has requested a proxy check. A proxy checker will shortly look into the case.
- 125.166.12.128 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Reason: The socks4://103.144.209.98:3629
way for using the open proxy no longer works, and I was unable to find a different one. Martin Urbanec (talk) 09:34, 24 February 2022 (UTC)
38.130.248.0/22
– This proxy check request is closed and will soon be archived by a bot.
- 38.130.248.0/22 · contribs · block · log · stalk · Robtex · whois · Google
Reason: Proxy/webhost (MR Networking, SRL) wizzito | say hello! 23:05, 4 April 2022 (UTC)
- It's a little hard to tell what the ISP offers precisely, but this doesn't look like a dedicated hosting range.
Closing without action. --Blablubbs (talk) 10:58, 14 May 2022 (UTC)
103.214.112.0/23
– This proxy check request is closed and will soon be archived by a bot.
- 103.214.112.0/23 · contribs · block · log · stalk · Robtex · whois · Google
Reason: webhost wizzito | say hello! 23:25, 8 April 2022 (UTC)
Confirmed, the following IPs are unblocked nodes of FlyGateVPN:
- 31.192.107.217 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 94.103.12.201 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 102.223.74.94 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 103.214.112.26 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 103.214.112.29 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 103.214.112.42 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 103.214.112.153 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 103.214.112.229 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- 194.156.67.200 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
- Everything else is already covered by other webhost blocks. I would recommend hardblocking the following with {{colocationwebhost}}:
- 31.192.107.0/24 · contribs · block · log · stalk · Robtex · whois · Google (HOSTKEY-RU-AS, NL)
- 94.103.12.0/24 · contribs · block · log · stalk · Robtex · whois · Google (TRUSTEDNETWORK-AS, RU)
- 102.223.72.0/22 · contribs · block · log · stalk · Robtex · whois · Google (SUN NETWORK AFRICA CLOUD [1])
- 103.214.112.0/23 · contribs · block · log · stalk · Robtex · whois · Google (PT Cloud Hosting Indonesia / PT Denbe Anugerah Solusindo [2])
- 194.156.67.0/24 · contribs · block · log · stalk · Robtex · whois · Google (FOXCLOUD_COMMUNICATIONS_SRL)
- Best, MarioGom (talk) 23:44, 13 May 2022 (UTC)
Done and closing. --Malcolmxl5 (talk) 07:49, 14 May 2022 (UTC)
175.143.95.18
– This proxy check request is closed and will soon be archived by a bot.
- 175.143.95.18 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Reason: I'm using a shadowsocks proxy. This is my IP address. — Preceding unsigned comment added by 175.143.95.18 (talk • contribs) 16:32, 6 May 2022 UTC) (UTC)
- Do you have connection details or a reference to the proxy listing this came from? I cannot verify this externally. MarioGom (talk) 23:12, 13 May 2022 (UTC)
Highly likely an open proxy. I have found a probable external signature for this open shadowsocks proxy network. This particular IP seems to be residential, so the proxy probably won't stay in the same IP indefinitely. Requesting a second opinion for the appropriate administative action. MarioGom (talk) 21:00, 23 May 2022 (UTC)
Proxy blocked for a month – that's usually my starting point for open proxies because I think it's a reasonable compromise between covering a good chunk of the expected lifespan and not incurring excessive collateral, though I guess it's mostly a matter of preference. Closing. --Blablubbs (talk) 06:39, 25 May 2022 (UTC)
2001:2d8::/32, 2001:e60::/32, 2001:4430::/32 (IPv6)
– This proxy check request is closed and will soon be archived by a bot.
- 2001:2d8::/32 · contribs · block · log · stalk · Robtex · whois · Google – SK Telecom, Currently blocked on this wiki for 1 year for unknown reasons (probably an open proxy or Long-term abuse)
- 2001:e60::/32 · contribs · block · log · stalk · Robtex · whois · Google – Korea Telecom
- 2001:4430::/32 · contribs · block · log · stalk · Robtex · whois · Google – LG U+
Reason: South Korean mobile network operator's LTE open proxy bands. These bands have a lot of block logs on kowiki (Typical reasons are page pranks, page vandalism, and avoiding of block through multiple accounts and IPs within the bands: 2001:2d8::/32, 2001:e60::/32, 2001:4430::/32), and these bands are violating policies and guidelines and vandalising through multi-accounts and IP adresses abuse. Also, these bands are habitual multi-account mass creation band and in the blocking log, the reason for 2 bands is "Long-term abuse". 2001:2d8::/32 and 2001:e60::/32 band is currently blocked on kowiki for 3 days. (2d8 and e60) If unblocked, there is a risk of causing problems in various wiki projects including Wikipedia. Please permanently block editing user talk page too and globally lock these LTE bands with IP adress only. Goondae (talk) 11:43, 9 May 2022 (UTC)
Additional information needed. @Goondae: I'm confused – is there any evidence these ranges have proxies on them? If yes, could you please provide it? If no, I'm afraid this is not the right venue; WP:ANI or m:SRG would probably be your best bet. On a sidenote, @Girth Summit: I've added {{anonblock}} to the block mentioned by the filer; I hope that's alright. --Blablubbs (talk) 20:30, 10 May 2022 (UTC)
- Thanks Blablubbs, I should have done that in the first place. Cheers Girth Summit (blether) 05:34, 11 May 2022 (UTC)
- These LTE bands are proxyed by mobile network operators. These bands, which are IPv6, are more anonymous because the IP address changes just by turning LTE off and on. This easily circumvents penalties and abuses policies and guidelines (e.g. changing an IPv6 address by turning LTE off and on on a blocked IPv6 address). Therefore, these bands can be considered as open proxy. Goondae (talk) 12:15, 15 May 2022 (UTC)
Automated lists and tools
- User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
- ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
- IPCheck is a tool that can help provide clues about potential open proxies.
- Bullseye provides information about IPS, including clues about potential open proxies.
- whois-referral is a generic WHOIS tool.
- Range block finder finds present and past range blocks.
See also
- Subpages
- Related pages
- Policy on open proxies
- Open proxy detection
- Guide to checking open proxies
- Proxy check result templates
- Advice to users using Tor to bypass the Great Firewall
- meta:XFF project
- Sister projects (defunct)