Wikipedia:WikiProject on open proxies

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Administration index MetaProject on open proxies (en-Wikipedia chapter)
 If you've been blocked as an open proxy, please see: Help:blocked.

The multiwiki MetaProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

Proxyblock.png
Open proxies may be blocked from editing

Automated lists and tools[edit]

  • User:SQL/Non-blocked compute hosts maintained by User:SQLBot is a list of open proxy ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
  • ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
  • IPCheck is a tool that can help identify open proxies.

Reporting[edit]

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I. For block requests:
Verify that the following criteria has been met:
  • The IP has made abusive contributions within the past week
For unblock requests:
Verify that the following criteria has been met:
  • No current criteria
II. For block requests For unblock requests
Replace "IP" below with the IP address you are reporting.


Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.
Verified Users/Sysops Templates
  • IP is an open proxy {{Proxycheck|confirmed}} for confirmed open proxies and TOR exit nodes.
  •  Likely IP is an open proxy {{Proxycheck|likely}} for likely open proxies and TOR exit nodes.
  •  Possible IP is an open proxy {{Proxycheck|possible}} for possible open proxies and TOR exit nodes.
  •  Unlikely IP is an open proxy {{Proxycheck|unlikely}} for unlikely open proxies and TOR exit nodes.
  • Not currently an open proxy {{Proxycheck|unrelated}} for IP's confirmed not to be an open proxy or TOR exit node.
  • Inconclusive {{Proxycheck|inconclusive}} for IP's that are inconclusive.
  •  Declined to run a check {{Proxycheck|decline}} to decline a check.
  • Open proxy blocked {{Proxycheck|blocked}} for open proxies and TOR nodes that have been blocked. Please add this if you block the IP.

Requests[edit]

8.37.154.122[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

8.37.154.122 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: geforce now ip, using the steam browser to type this, can be used for disruptive editing so iam requesting a block. 8.37.154.122 (talk) 14:13, 4 May 2019 (UTC)

Only edit from the IP was the one above, no other edits on Special:Contributions/8.37.154.122/21, no bad edits on Special:Contributions/8.37.154.122/19 --DannyS712 (talk) 20:47, 20 July 2019 (UTC)

45.121.208.0/22[edit]

Symbol comment vote.svg – This proxy check request is closed and may now be archived.

45.121.210.211 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Suspicious edits located during Japanelemu sockfarm cleanup. Edits from 45.121.208.0/22, WHOIS lists an Australian server farm provider ☆ Bri (talk) 19:54, 18 May 2019 (UTC)

Good catch, sorry about the delay. I have added this ISP to NBCH, and they should be blocked shortly. SQLQuery me! 20:55, 22 July 2019 (UTC)

91.207.171.121, 81.200.17.161, 91.027.170.240[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

91.207.171.121 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk
81.200.17.161 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk
91.027.170.240 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

We've had an ongoing massive campaign to insert the same reference spamming type edit into a range of machine learning articles. I'd estimate at least 30 attempts over the year that I've been closely watching. The pattern is a batch / rash of edits by brand new ip's in a single geographic area. I see that the source of a previous batch is now blocked. They just started another burst, the same edit edits as before, this from three new (single edit) IP's in the same area in Russia, triple entering the same edit on one article in 2 days. Sincerely, North8000 (talk) 01:39, 21 May 2019 (UTC)

5.34.66.26[edit]

Symbol comment vote.svg – This proxy check request is closed and may now be archived.

5.34.66.26 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Not sure if it's an open proxy or not, but the host name "client.fttb.2day.kz" seems a bit suspicious. 123.218.188.28 (talk) 17:13, 21 May 2019 (UTC)

 Unlikely IP is an open proxy SQLQuery me! 20:49, 22 July 2019 (UTC)

67.226.220.0/22[edit]

Symbol comment vote.svg – This proxy check request is closed and may now be archived.

67.226.220.0/22 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Amazon AWS webhosting. 123.218.188.28 (talk) 18:59, 21 May 2019 (UTC)

While IPQS Says that the ISP name is Amazon, actually checking the whois says differently. SQLQuery me! 20:42, 22 July 2019 (UTC)

185.97.92.116/29[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

185.97.92.116/29 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Used by a pretty determined editor (who uses others as well, including 185.104.253.51 ) and keeps on including unverified information/data without explanation. See for instance disruption at Religion in Lebanon. Drmies (talk) 16:25, 9 June 2019 (UTC)

72.52.64.0/18[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

72.52.64.0/18 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Hurricane Electric. 60.133.229.157 (talk) 05:02, 18 June 2019 (UTC)

2a01:4f9:2a:6d5::/64[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

2a01:4f9:2a:6d5::/64 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Open proxy/web hosting. Most recently abused from 2a01:4f9:2a:6d5::2 (talk · contribs · WHOIS). 92.17.91.122 (talk) 22:41, 23 July 2019 (UTC)

102.129.224.2[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

102.129.224.2 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Suspicious edits; recently blocked 31 hrs. Stalk toy also indicates two blocks on other wikis. Zaxxon0 (talk) 06:50, 6 August 2019 (UTC)

(non-clerk comment) IP Quality reports "This IP address appears to be a high risk proxy connection." --DannyS712 (talk) 06:59, 6 August 2019 (UTC)

212.71.250.215[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

212.71.250.215 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Linode cloud server, used by obvious sock of Shingling334, listed as high-risk blacklisted proxy by IPQualityScore. IamNotU (talk) 14:20, 11 August 2019 (UTC)

198.57.27.142[edit]

Symbol wait old.png A user has requested a proxy check. A proxy checker will shortly look into the case.

198.57.27.142 - talk - edits - block - log - current blocks - ipinfo - Robtex - WHOIS - proxy checker - ipcheck - Google - HTTP - stalk

Reason: Another socking proxy. GlobalTeleHost, IPQualityScore lists as blacklisted/proxy. Same thing as now-blocked Special:Contributions/198.57.27.196. IamNotU (talk) 12:18, 14 August 2019 (UTC)

See also[edit]

Subpages[edit]

Related pages[edit]

Chapters[edit]