Wikipedia:WikiProject on open proxies

From Wikipedia, the free encyclopedia
  (Redirected from Wikipedia:ROP)
Jump to: navigation, search
Administration index MetaProject on open proxies (en-Wikipedia chapter)
 If you've been blocked as an open proxy, please see: Help:blocked.

The multiwiki MetaProject on open proxies seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

Proxyblock.png
Open proxies may be blocked from editing

Reporting[edit]

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I. For block requests:
Verify that the following criteria has been met:
  • The IP has made abusive contributions within the past week
For unblock requests:
Verify that the following criteria has been met:
  • No current criteria
II. For block requests For unblock requests
Replace "IP" below with the IP address you are reporting.


Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.

Requests[edit]


94.242.8.71[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

94.242.8.71 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

I've been subject to a fair amount of vandalizing in the past three weeks, and had my talk and userspace pages semi'd for a week. This one's not a vandal, per ser, but appears to be part of the same campaign. Reason: Suspicious edits (including NPA) on my talk page and The Horst Wessel Song

Open proxy blocked. Big fat proxy on 8080; shows up on spam lists as well so likely stable. Now blocked. Kuru (talk) 01:34, 31 May 2015 (UTC)

125.209.88.46[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

125.209.88.46 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Another in the series of IPs harrassing me. (The majority of past ones have been blocked as being open proxies.) Reason: Harrassing edits

Blocked, thanks. Materialscientist (talk) 23:42, 1 June 2015 (UTC)

212.138.92.17[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

212.138.92.17 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Probably the same editor as above. Per geolocate, address has recently beenreported as a spam source. Reason: Suspicious edits

Blocked, thanks. Materialscientist (talk) 00:50, 2 June 2015 (UTC)

168.1.75.61[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

168.1.75.61 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Reason: Suspicious edits. I saw this IP removing comments at WP:AE. Checking with whois, I saw that this /24 range belongs to Softlayer Hosting. I've imposed a one-month anon-only block of 168.1.75.0/24, marking it as a webhostblock. Would like review here to see if that's correct, and find out if the block should be longer. EdJohnston (talk) 03:30, 18 June 2015 (UTC)

I can't speak to the whole range, but 168.1.75.61:8888 is an Australian exit node for a cheap VPN anonymous proxy service in the US: [1]. Kuru (talk) 11:34, 18 June 2015 (UTC)
Thanks. Since at least one IP in the range is being used as an open proxy (a cheap VPN with no questions asked and no logging), I've upgraded this to a hardblock of the range for one month. EdJohnston (talk) 15:49, 18 June 2015 (UTC)

168.1.99.213[edit]

Symbol merge vote.svg – A user has requested a proxy check. A proxy checker will shortly look into the case.

168.1.99.213 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Reason: Suspicious edits. This particular IP is now blocked for evasion, but it drew my attention to the range. The /24 IP range is used mostly for Gamergate-related edits. (See 168.1.99.0/24 (block range · block log · range contributions · WHOIS (partial))). Since it's operated by Softlayer Hosting, I've issued a two-month {{webhostblock}} of the /24. This is similar to my previous post here about 168.1.75.0/24 (block range · block log · range contributions · WHOIS (partial)), which is also operated by Softlayer and is already blocked. The larger /16 is a range operated by RIPE in Amsterdam, but only some of the subranges are run by Softlayer. Would appreciate any comments to be sure this block is correct. EdJohnston (talk) 16:27, 18 June 2015 (UTC)

Exact same service as above running on 168.1.99.213:8888. Labs appears to be down (the rangecontributions tool), but I'll poke around at active IPs in the range to see if anything else is running that proxy before closing this. Kuru (talk) 01:19, 19 June 2015 (UTC)

46.60.253.64[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

46.60.253.64 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Reason: Hard pressed to find any good edits in the /24 range. Rangeblock-Calculator indicates it's some kind of proxy.

Blocked /24 range for 72 hours. Checking in here to see if it should be extended. --NeilN talk to me 14:36, 24 June 2015 (UTC)

Not an open proxy. Nothing open on that IP. I also checked a few other active IPs on that range; all of them seem to be locked down. These appear to be exit nodes for The Southest Grid For Learning, which is a UK NGO providing broadband to schools. As such, this is a network "proxy" in that multiple schools likely funnel traffic through them, but not an "open" or "webhost" type of proxy. Your approach of treating them like a normal schoolblock seems sufficient. Kuru (talk) 18:21, 24 June 2015 (UTC)

95.141.29.55[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

[[User:|]] - [[User Talk:|talk]] - edits - block - log - current blocks - Robtex/WHOIS - Google - [https:// HTTP]

This is CyberGhost open proxy. https://de.wikipedia.org/wiki/CyberGhost_VPN

Along with 95.141.29.54, 95.141.29.53, 95.141.29.56 Another range 85.9.20.144/158. They way Tor exit node is blocked. This should also be blocked. Cyberghost allows users to change his location. Reason: Suspicious edits

Clear proxies for the Cyberghostvpn are on 53, 55, and 56. 54 has the same open ports, but the redirect was down. I hard blocked a tiny range (95.141.29.48/28) that should catch all of those. Will look at the other range in a sec. Kuru (talk) 02:33, 26 June 2015 (UTC)
Same as above, clear exit nodes at 144, 146, 158. Hard blocked 85.9.20.144/28. Kuru (talk) 02:37, 26 June 2015 (UTC)

5.254.97.67/109[edit]

Symbol comment vote.svg – This proxy check request is closed and will shortly be archived by a bot.

5.254.97.67 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Cyberghost VPN very long range. From 67 to 109 112.79.37.132 (talk) 09:55, 26 June 2015 (UTC)

Already blocked as 5.254.96.0/21 Materialscientist (talk) 10:07, 26 June 2015 (UTC)

This starts as 5.254.97 not 5.254.96

Just passing by. That netmask means your max host address would be 5.254.103.254. The block accounts for the 5.254.97 as well. Unsure what the /109 stands for, that's not a valid netmask. E. Lee (talk) 05:56, 28 June 2015 (UTC)

216.223.27.59[edit]

Symbol merge vote.svg – A user has requested a proxy check. A proxy checker will shortly look into the case.

216.223.27.59 - talk - edits - block - log - current blocks - Robtex/WHOIS - Google - HTTP

Reason: No need for an unblock persay, but was wondering if I could get a proxy check for this IP, which no longer appears to be an open proxy. A quick nmap -p 1-10000 shows no suspicious ports. On behalf of the WP:ACC team, E. Lee (talk) 05:53, 28 June 2015 (UTC)

See also[edit]

Subpages[edit]

Related pages[edit]

Chapters[edit]