Jump to content

Wikipedia:Open proxies noticeboard

From Wikipedia, the free encyclopedia
(Redirected from Wikipedia:OP)
    Open proxies noticeboard
    Shortcuts

    The Open proxies noticeboard seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

    • If you've been blocked as an open proxy, please see: Help:blocked.
    • To report a proxy check or an incorrect block, see the #Reporting section.

    Reporting

    [edit source]

    Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

    File a new report here
    I.
    For block requests:

    Verify that the following criterion has been met:

    • The IP has made abusive contributions within the past week
    For unblock requests:

    Verify that the following criteria has been met:

    • No current criteria
    II.

    For block requests Replace "IP" below with the IP address you are reporting.

    For unblock requests Replace "IP" below with the IP address you are reporting.

    III. Fill out the resulting page and fill-in the requested information.
    IV. Save the page.

    Requests

    [edit source]

    186.237.103.139

    [edit source]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: IP information (Special:IPInfo) for a temporary account that has been vandalizing identifies this IP as KOOKEEY_PROXY. Peaceray (talk) 18:51, 16 September 2026 (UTC)reply

    no No action. Unlikely to be proxy use. Same as previously, these are proxies typically used for web scraping and data collection. All the associated TAs geolocating to the same country suggest the user is not hiding their location and that this is dynamic mobile use. — Malcolmxl5 (talk) 13:31, 6 October 2026 (UTC)reply

    172.56.33.190

    [edit source]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: IP checker says it detects the potential for a proxy, and the IP was used by an LTA. The thing that made me report this one is that the IP address of one of the LTA socks changed mid-edits if you go through their contribs. Jdcomix (talk) 20:13, 19 September 2026 (UTC)reply

    no No action Unlikely to be proxy use. I see what you mean, there’s a switch from a residential broadband connection to a mobile connection in mid-flow but there's very little else to suggest proxy use. --Malcolmxl5 (talk) 09:58, 12 October 2026 (UTC)reply

    165.85.15.212

    [edit source]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: Palo Alto/GlobalProtect Cloud VPN hit (and BLP vandalism to boot). Netstars22 (talk to me!) 23:45, 9 October 2026 (UTC)reply

     Completed. Blocked the /18. One of Google's cloud platforms albeit for enterprise users. --Malcolmxl5 (talk) 10:43, 12 October 2026 (UTC)reply

    129.205.124.247

    [edit source]

    – This proxy check request is closed and will soon be archived by a bot.

    Test edit to Talk:Linux, which has a recent history of proxy abuse. See Wikipedia:Sockpuppet investigations/Softwareperson1000 --Guy Macon (talk) 12:41, 16 October 2026 (UTC)reply

    no No action. The IP address has an interesting block log but it seems to me to be a typical CGNAT connection, that is, a dynamic mobile network connection in a developing country where thousands of mobile data users continuously rotate through a small pool of public IPv4 addresses as users moves between cell towers or otherwise reconnect to the network. It is akin to a shared IP address and while it is possible for devices to be used as a proxy node, the device and the user will be long gone from this connection. — Malcolmxl5 (talk) 13:58, 18 October 2026 (UTC)reply

    35.40.70.123

    [edit source]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: ipcheck.toolforge.org flagged it as a proxy and vpn (merit network), and the TA using the ip (tried to) vandalise a page (see https://en.wikipedia.org/wiki/Special:AbuseLog/45413191), so I'm just going to let someone smarter check this Ednxa (talk) 08:25, 17 October 2026 (UTC)reply

    no No action. A false positive. The flag from IPQualityScore (which is known to produce false positives) is not corroborated by other proxy detection sites. The IP address is owned by a university and is likely a shared IP. — Malcolmxl5 (talk) 10:08, 19 October 2026 (UTC)reply

    202.43.94.1

    [edit source]

    A user has requested a proxy check. A proxy checker will shortly look into the case.

    Reason: Open proxy, also see 182.8.226.189, related proxy. Traumnovelle (talk) 20:40, 30 October 2026 (UTC)reply

    Automated lists and tools

    [edit source]
    • User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
    • ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
    • IPCheck is a tool that can help provide clues about potential open proxies.
    • Bullseye provides information about IPS, including clues about potential open proxies.
    • whois-referral is a generic WHOIS tool.
    • Range block finder finds present and past range blocks.

    See also

    [edit source]
    Subpages
    Related pages
    Sister projects (defunct)
    Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Open_proxies_noticeboard&oldid=1360182047"