Jump to content

Wikipedia:Open proxies noticeboard/Requests

Add links
From Wikipedia, the free encyclopedia
< Wikipedia:Open proxies noticeboard
This is an old revision of this page, as edited by Q-bit array (talk | contribs) at 07:11, 6 December 2022 (Answer). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.


Shortcut

Unwired Broadband

– A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

23.227.96.0/19 · contribs · block · log · stalk · Robtex · whois · Google
104.200.32.0/20 · contribs · block · log · stalk · Robtex · whois · Google
104.247.128.0/20 · contribs · block · log · stalk · Robtex · whois · Google
104.247.144.0/21 · contribs · block · log · stalk · Robtex · whois · Google
198.210.32.0/19 · contribs · block · log · stalk · Robtex · whois · Google
209.54.32.0/20 · contribs · block · log · stalk · Robtex · whois · Google

Reason: These ranges no longer appear to be used for hosting; the ones listed here are registered to Unwired Broadband (AS33548), which is a residential and business ISP. wizzito | say hello! 20:54, 22 August 2022 (UTC)[reply]

I agree it looks like these blocks are now obsolete. It's been long since they were added, and they seem to have changed hands from hosting to broadband since. Pink clock Awaiting administrative action: Please, consider unblocking these. MarioGom (talk) 22:42, 17 November 2022 (UTC)[reply]

5.199.171.135

– This proxy check request is closed and will soon be archived by a bot.

Reason: Obviously, a VPN from Lithuania. SpinnerLaserzthe2nd (talk) 08:44, 3 December 2022 (UTC)[reply]

 Confirmed. The IP is a TunnelBear VPN exit (see spur, shodan). The range (/22) is soft-blocked as a webhost, but this IP could use a hard block. Thank you. MarioGom (talk) 10:18, 4 December 2022 (UTC)[reply]
@MarioGom: I'm inclined to just harden the block on the /22 – are you seeing anything that would discourage that? --Blablubbs (talk) 16:39, 5 December 2022 (UTC)[reply]
Blablubbs: No, I think that's fine too. MarioGom (talk) 16:41, 5 December 2022 (UTC)[reply]
 Done, closing. --Blablubbs (talk) 16:44, 5 December 2022 (UTC)[reply]

196.44.39.130

– A proxy checker has requested a second opinion on this case.

Reason: Just abused by Bugmenot123123123 (talk · contribs · deleted contribs · logs · filter log · block user · block log) who block-evades primarily through open proxies (see User talk:Softlemonades#Break for more details on this sockmaster if needed). Note IP has already been blocked for 31 hours, but I'm leaving this open for further investigation since a longer block will be needed if it's an open-proxy as I suspect. 74.73.224.126 (talk) 15:53, 5 December 2022 (UTC)[reply]

 Possible IP is an open proxy at best. —‍Mdaniels5757 (talk • contribs) 19:13, 5 December 2022 (UTC)[reply]
@Mdaniels5757: stalktoy shows it's been blocked by QBA-bot as an open-proxy on two wikis. To me that suggests at least  Likely. That said logged-out abuse is minimal thus far so I understand if you're not yet comfortable blocking. 74.73.224.126 (talk) 03:07, 6 December 2022 (UTC)[reply]
Yes, but IPcheck shows nothing suggesting it's a proxy, an nmap scan shows nothing but a firewall, and review of the associated hostname shows it's associated with a vehicle traffic management company. I really don't see any evidence other than the other wiki's block that this is an open proxy. Because I'm not sure what the block on ruwiki and ruwikiquote are based on and you seem quite sure, I'll reopen this for a second opinion, but I really don't see anything that suggests someone else's opinion will be different. —‍Mdaniels5757 (talk • contribs) 03:32, 6 December 2022 (UTC)[reply]
Well let's ping Q-bit array, the bot-op responsible for the block, for additional input. 74.73.224.126 (talk) 03:46, 6 December 2022 (UTC)[reply]
Hello! According to my bot's logs, the IP was recognized as a proxy by proxycheck.io. I have an extended paid subscription there, so it tends to detect more than the free version of the service. P.S.: If your "proxy-loving" LTA used it recently then it's additional strong evidence that it's a proxy (or he's currently on vacation in the South Africa, which is not that likely). -- Q-bit array (talk) 07:11, 6 December 2022 (UTC)[reply]
@Mdaniels5757 this IP is likely part of a residential proxy network. Those don't tend to show up on a port scan through nmap or Shodan, so you need to check other services like IPQualityScore or Spur. Sideswipe9th (talk) 05:44, 6 December 2022 (UTC)[reply]

192.168.4.127

– A user has requested a proxy check, but a proxy checker needs more information before making an decision whether or not to investigate.

192.168.4.127 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Would like to edit articles at school but this might not be a good choose because of the chance that my fellow classmate will abuse this privilege please do what you think is right. Aidan_duckapple (talk) 18:37, 5 December 2022 (UTC)[reply]

@Aidan glendenning: It sounds like you want to edit through a blocked proxy. If so, please see WP:IPECPROXY for instructions. Either way, we cannot check the IP you provided because it is a private/local IP. Please ping me and reply here if you have any questions. —‍Mdaniels5757 (talk • contribs) 19:21, 5 December 2022 (UTC)[reply]

187.62.33.220

– A proxy checker has requested administrator assistance for action regarding the case below. The requested action is below.

Reason: Abused by the same sockmaster as 196.44.39.130 above; this one looks a bit more obvious 74.73.224.126 (talk) 03:28, 6 December 2022 (UTC)[reply]

 Likely IP is an open proxy,  Confirmed to be some a proxy of some sort. Flagging for an admin to consider a block. —‍Mdaniels5757 (talk • contribs) 03:40, 6 December 2022 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Open_proxies_noticeboard/Requests&oldid=1125858871"