Wikipedia:Open proxies noticeboard/Requests
![]() | Looking to make a new report? You're in the wrong place! Please go to Wikipedia:Open proxies noticeboard#Reporting and fill in the relevant box. |
Index |
This page has archives. Sections older than 41666.5 days may be automatically archived by ClueBot III when more than 5 sections are present. |
46.112.98.31
A user has requested a proxy check. A proxy checker will shortly look into the case.
- 46.112.98.31 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
While monitoring recent changes, I noticed that there are several IPs that frequently make the same edit patterns, as can be seen from the edit summaries and added links. I suspect that the IPs are using an open proxy. Spamhaus ZEN DNSBL says "127.0.0.11 - PBL Listed (Should not be sending email)". Alfarizi M (talk) 15:32, 16 May 2025 (UTC)
- Prove: [1] [2] [3] [4] [5], etc. they seem to change their IPs so fast. Alfarizi M (talk) 04:17, 17 May 2025 (UTC)
185.121.94.157
– This proxy check request is closed and will soon be archived by a bot.
- 185.121.94.157 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Reason: Block evasion. Editing previous entires. Tule-hog (talk) 15:42, 18 May 2025 (UTC)
Open proxy blocked Urban VPN. — Naomi Amethyst 05:02, 19 May 2025 (UTC)
82.208.33.205
– This proxy check request is closed and will soon be archived by a bot.
- 82.208.33.205 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Flagged as a proxy by whatsmyip among others, and abused by LTA that normally uses proxies. 184.152.65.118 (talk) 05:40, 19 May 2025 (UTC)
Nmap scan report for 82.208.33.205 Host is up, received user-set (0.14s latency). Scanned at 2025-05-23 05:29:13 UTC for 406s Not shown: 65521 filtered tcp ports (no-response) PORT STATE SERVICE REASON VERSION 1001/tcp open rtsp syn-ack ttl 54 |_rtsp-methods: ERROR: Script execution failed (use -d to debug) | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.0 200 OK | content-length: 0 | RTSPRequest: | RTSP/1.0 501 Not Implemented | content-length: 0 | SIPOptions: | SIP/2.0 501 Not Implemented |_ content-length: 0 7880/tcp open ssl/rtsp syn-ack ttl 54 |_ssl-date: TLS randomness does not represent time | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.0 400 Bad Request | content-length: 0 | RTSPRequest: | RTSP/1.0 400 Bad Request | content-length: 0 | SIPOptions: | SIP/2.0 400 Bad Request |_ content-length: 0 | ssl-cert: Subject: commonName=185.255.103.243 | Issuer: commonName=185.255.103.243 | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2024-05-19T10:32:36 | Not valid after: 9999-12-31T23:59:59 | MD5: ef08:6f68:7a47:8a2a:231a:8145:fd54:99be | SHA-1: b376:6fdc:f0eb:5fd1:616f:f076:b9ec:2573:66c1:38d7 | -----BEGIN CERTIFICATE----- | MIICtjCCAZ6gAwIBAgIIFQGTvuW1gcgwDQYJKoZIhvcNAQELBQAwGjEYMBYGA1UE | AwwPMTg1LjI1NS4xMDMuMjQzMCAXDTI0MDUxOTEwMzIzNloYDzk5OTkxMjMxMjM1 | OTU5WjAaMRgwFgYDVQQDDA8xODUuMjU1LjEwMy4yNDMwggEiMA0GCSqGSIb3DQEB | AQUAA4IBDwAwggEKAoIBAQDFApEWgkWVJHfox2aq59ajuGO0Pu58Pr7e8+DtoL5w | MaivHrnmqY4nZ52I3/UWWZJsBEoHpOEIibQXI2XAdRyTkPtlhBSDBVPBjbCjmv3w | 6EBxs8HzoxtwSUWMb84K0wKja9m31bzZjg1GX8RLT+wG6vor9eOQMrw6eD/R+Rwr | aaun3YO41WpOJ3DyaESA9JDEhPBRwMtd1ZA0vg8/PQoZPIPTJlfF+bKR7p64dumc | keRb1b0thhTk+jzURl7+q36et2ELHF9S95qY/wJtSwiuB2Jbsef0NwPN4aInIchH | EWgFTDlrE1Gfq+BMw4Z8BYqy5ShNa07rvwg4zGe+JBHVAgMBAAEwDQYJKoZIhvcN | AQELBQADggEBAGg8nk5xy092CUMoszvGPXqH52lLn1nFPh47n5yGwcRv6LxzDJC/ | Pt40G9Pg5CDSy4V3qKs7+gI7fsfHudh5oVHcA5ni73fBvPgvIGxI65oeCvhw58IU | hkbL1tP1NlwOqCMnDdGS2M+WSy5aJcxlvx+voaoYZgvJhuzR8SGMfrIo6ZR67W3R | K/yRR5XcIX7K/FuRwhrwtfuV5eaURsqZRiyOrB/g4IvgmmB0H0ANGWFbIJwGaWMY | 8A5wf1WQpgjHbd2asPK7/Tr4HKN6MNJWeGE0Y0YTgRb08k6Mr1mHLNFmFEaldNIB | DtjGFv9REJONMoHrTkdFC7i1MROhEvolAOY= |_-----END CERTIFICATE----- 9143/tcp open unknown syn-ack ttl 54 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.0 200 OK | Date: Fri, 23 May 2025 05:34:40 GMT | Content-Length: 150 | Content-Type: text/html; charset=utf-8 | <html> | <head><title>Node Exporter</title></head> | <body> | <h1>Node Exporter</h1> | <p><a href="/metrics">Metrics</a></p> | </body> | </html> | GenericLines, Help, Kerberos, RTSPRequest, SSLSessionReq, TLSSessionReq, TerminalServerCookie: | HTTP/1.1 400 Bad Request | Content-Type: text/plain; charset=utf-8 | Connection: close | Request | GetRequest: | HTTP/1.0 200 OK | Date: Fri, 23 May 2025 05:34:12 GMT | Content-Length: 150 | Content-Type: text/html; charset=utf-8 | <html> | <head><title>Node Exporter</title></head> | <body> | <h1>Node Exporter</h1> | <p><a href="/metrics">Metrics</a></p> | </body> | </html> | HTTPOptions: | HTTP/1.0 200 OK | Date: Fri, 23 May 2025 05:34:13 GMT | Content-Length: 150 | Content-Type: text/html; charset=utf-8 | <html> | <head><title>Node Exporter</title></head> | <body> | <h1>Node Exporter</h1> | <p><a href="/metrics">Metrics</a></p> | </body> |_ </html> 44445/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 44446/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 44464/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 44465/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 49155/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 49156/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 50100/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 50101/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 51523/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 51524/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 59100/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 59101/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:34:17 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port1001-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%r SF:(GetRequest,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\r\n" SF:)%r(HTTPOptions,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\ SF:r\n")%r(RTSPRequest,33,"RTSP/1\.0\x20501\x20Not\x20Implemented\r\nconte SF:nt-length:\x200\r\n\r\n")%r(FourOhFourRequest,26,"HTTP/1\.0\x20200\x20O SF:K\r\ncontent-length:\x200\r\n\r\n")%r(SIPOptions,32,"SIP/2\.0\x20501\x2 SF:0Not\x20Implemented\r\ncontent-length:\x200\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port7880-TCP:V=7.94SVN%T=SSL%I=7%D=5/23%Time=683008E6%P=x86_64-pc-linux SF:-gnu%r(GetRequest,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-len SF:gth:\x200\r\n\r\n")%r(HTTPOptions,2F,"HTTP/1\.0\x20400\x20Bad\x20Reques SF:t\r\ncontent-length:\x200\r\n\r\n")%r(RTSPRequest,2F,"RTSP/1\.0\x20400\ SF:x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n")%r(FourOhFourRequest SF:,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n SF:")%r(SIPOptions,2E,"SIP/2\.0\x20400\x20Bad\x20Request\r\ncontent-length SF::\x200\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port9143-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D4%P=x86_64-pc-linux-gnu%r SF:(GenericLines,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x SF:20text/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Ba SF:d\x20Request")%r(GetRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri SF:,\x2023\x20May\x202025\x2005:34:12\x20GMT\r\nContent-Length:\x20150\r\n SF:Content-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head SF:><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x SF:20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t SF:\t</body>\n\t\t\t</html>")%r(HTTPOptions,10B,"HTTP/1\.0\x20200\x20OK\r\ SF:nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:13\x20GMT\r\nContent-Lengt SF:h:\x20150\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html> SF:\n\t\t\t<head><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\ SF:t\t<h1>Node\x20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics< SF:/a></p>\n\t\t\t</body>\n\t\t\t</html>")%r(RTSPRequest,67,"HTTP/1\.1\x20 SF:400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\ SF:r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Help,67,"HTTP/ SF:1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charse SF:t=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(SSLSes SF:sionReq,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text SF:/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20R SF:equest")%r(TerminalServerCookie,67,"HTTP/1\.1\x20400\x20Bad\x20Request\ SF:r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nConnection:\x20clos SF:e\r\n\r\n400\x20Bad\x20Request")%r(TLSSessionReq,67,"HTTP/1\.1\x20400\x SF:20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nCo SF:nnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Kerberos,67,"HTTP/1 SF:\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset SF:=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(FourOhF SF:ourRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri,\x2023\x20May\x2 SF:02025\x2005:34:40\x20GMT\r\nContent-Length:\x20150\r\nContent-Type:\x20 SF:text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head><title>Node\x20E SF:xporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x20Exporter</h1>\n SF:\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t\t</body>\n\t\t\t SF:</html>"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44445-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44446-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44464-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44465-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port49155-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port49156-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port OS fingerprint not ideal because: Missing a closed TCP port so results incomplete Aggressive OS guesses: Linux 5.0 - 5.5 (87%), Linux 2.6.18 (87%), Linux 2.6.32 (87%), Linux 2.6.32 or 3.10 (87%), DD-WRT v24-sp1 (Linux 2.4) (87%), Linux 3.2.0 (87%), Synology DiskStation Manager 5.1 (86%), Linux 4.15 - 5.8 (86%), Linux 5.0 (86%), Linux 5.0 - 5.4 (86%) No exact OS matches for host (test conditions non-ideal). TCP/IP fingerprint: SCAN(V=7.94SVN%E=4%D=5/23%OT=1001%CT=%CU=36207%PV=N%DS=19%DC=T%G=N%TM=6830093F%P=x86_64-pc-linux-gnu) SEQ(SP=F7%GCD=1%ISR=10B%TI=Z%II=I%TS=A) OPS(O1=M514ST11NW7%O2=M514ST11NW7%O3=M514NNT11NW7%O4=M514ST11NW7%O5=M514ST11NW7%O6=M514ST11) WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88) ECN(R=Y%DF=Y%T=48%W=FAF0%O=M514NNSNW7%CC=Y%Q=) T1(R=Y%DF=Y%T=48%S=O%A=S+%F=AS%RD=0%Q=) T2(R=N) T3(R=N) T4(R=N) U1(R=Y%DF=N%T=48%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G) IE(R=Y%DFI=N%T=48%CD=S) Uptime guess: 40.688 days (since Sat Apr 12 13:05:01 2025) Network Distance: 19 hops TCP Sequence Prediction: Difficulty=247 (Good luck!) IP ID Sequence Generation: All zeros TRACEROUTE (using port 7880/tcp) HOP RTT ADDRESS 1 1.12 ms _gateway (10.199.22.3) 2 0.41 ms rtr-ge-dmarc.tblflp.net (10.199.1.1) 3 ... 4 23.45 ms rcmt-agw1.inet.qwest.net (71.32.31.17) 5 11.51 ms 4.68.144.73 6 13.30 ms ae2.3612.edge6.Washington12.net.lumen.tech (4.69.226.70) 7 12.16 ms 6939-3356-stk.sp.lumen.tech (4.68.39.110) 8 102.35 ms ae33-xcr1.ltw.cw.net (195.2.24.246) 9 95.95 ms ae37-pcr1.fnt.cw.net (195.2.2.74) 10 102.21 ms ae4-ucr1.czs.cw.net (195.2.10.233) 11 ... 12 109.50 ms ip-81-27-200-56.net.vodafone.cz (81.27.200.56) 13 112.32 ms spcom-ostrava.cust.vodafone.cz (213.192.19.14) 14 111.81 ms 91.245.14.254 15 ... 18 19 139.05 ms 82.208.33.205
Open proxy blocked — Naomi Amethyst 05:42, 23 May 2025 (UTC)
185.228.193.50
– This proxy check request is closed and will soon be archived by a bot.
- 185.228.193.50 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Flagged as a proxy by whatsmyip among others, and likewise abused by an LTA that normally uses proxies. See multiple entries above already blocked. 184.152.65.118 (talk) 05:43, 19 May 2025 (UTC)
Nmap scan report for 185.228.193.50 Host is up, received user-set (0.018s latency). Scanned at 2025-05-23 05:28:54 UTC for 619s Not shown: 65521 filtered tcp ports (no-response) PORT STATE SERVICE REASON VERSION 1001/tcp open rtsp syn-ack ttl 54 |_rtsp-methods: ERROR: Script execution failed (use -d to debug) | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.0 200 OK | content-length: 0 | RTSPRequest: | RTSP/1.0 501 Not Implemented | content-length: 0 | SIPOptions: | SIP/2.0 501 Not Implemented |_ content-length: 0 7880/tcp open ssl/rtsp syn-ack ttl 54 | ssl-cert: Subject: commonName=185.228.192.2 | Issuer: commonName=185.228.192.2 | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2024-05-19T10:00:57 | Not valid after: 9999-12-31T23:59:59 | MD5: 15a9:1d12:4c78:7bfc:3865:34aa:7014:21de | SHA-1: 4690:a1fb:904a:2caf:b0b8:c0d5:32e5:cc75:cc29:7679 | -----BEGIN CERTIFICATE----- | MIICsjCCAZqgAwIBAgIIHW+yWaw85N8wDQYJKoZIhvcNAQELBQAwGDEWMBQGA1UE | AwwNMTg1LjIyOC4xOTIuMjAgFw0yNDA1MTkxMDAwNTdaGA85OTk5MTIzMTIzNTk1 | OVowGDEWMBQGA1UEAwwNMTg1LjIyOC4xOTIuMjCCASIwDQYJKoZIhvcNAQEBBQAD | ggEPADCCAQoCggEBAJkXdCMeggFyKddofBNvgt7n1HrerxN+qREoc6Kj8nHctFyT | NVY4Neyd8u3UueEchRhD8GWYD/Ptc9RZfr31BnUFLRQuhyaqdqz2nc5URWFfQGqk | UK9WhH7y3WEpCAWwu8gFxXttEksOxTh/KGZncWrDo/GGf3KFkSQ86lJp9rLreOJB | x6/CMDCq5ptLF5AYJ9d3egQ2HynEA6XbHcUqfybKOqywBVYGteaMKEn8PutA09F2 | 7nVBhKa/iQaNYwhS++LLoJ2/EznKJE6/9rew7pm8EwXPo4NPywEmU06ZMQrqfOaV | YhL+dV95+T893K+xPJs+LUkpcI+toWnvZX7WQx8CAwEAATANBgkqhkiG9w0BAQsF | AAOCAQEAJdZlGzNuklK7YGO21KKh7jBfTH5DDR6oD2AX9G7+EwQbnCOoNy8fs/uy | c5OV89pezB5z0+8VdWSkmdq5OvsXyAUnxGMOLk1DhanNP6/0JCSeJAbQFqYSkh5o | IfdOTlknLAgpG18spCS75+OW738LLUwLKaLEqKTWgcr6O7CzmHyum8uw7VWofBpP | PYkpX2k69p9z3hvFkkH+UfHax45LbVp/gA0i5V1FLfJYLp+DjX+xXCt+2X4ytE4C | Za/CABXgBER0gA9Xug6ymJa2DpA+4QdpQ/sCJpybiCYYWguuaqEmSkf9UOGccSHL | Ow5Y1SP22K+RzwYt91kHKUqbP+dJwA== |_-----END CERTIFICATE----- |_ssl-date: TLS randomness does not represent time | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.0 400 Bad Request | content-length: 0 | RTSPRequest: | RTSP/1.0 400 Bad Request | content-length: 0 | SIPOptions: | SIP/2.0 400 Bad Request |_ content-length: 0 9143/tcp open unknown syn-ack ttl 54 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.0 200 OK | Date: Fri, 23 May 2025 05:38:02 GMT | Content-Length: 150 | Content-Type: text/html; charset=utf-8 | <html> | <head><title>Node Exporter</title></head> | <body> | <h1>Node Exporter</h1> | <p><a href="/metrics">Metrics</a></p> | </body> | </html> | GenericLines, Help, Kerberos, RTSPRequest, SSLSessionReq, TLSSessionReq, TerminalServerCookie: | HTTP/1.1 400 Bad Request | Content-Type: text/plain; charset=utf-8 | Connection: close | Request | GetRequest, HTTPOptions: | HTTP/1.0 200 OK | Date: Fri, 23 May 2025 05:37:37 GMT | Content-Length: 150 | Content-Type: text/html; charset=utf-8 | <html> | <head><title>Node Exporter</title></head> | <body> | <h1>Node Exporter</h1> | <p><a href="/metrics">Metrics</a></p> | </body> |_ </html> 44445/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 44446/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 44464/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 44465/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 49155/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 49156/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 50100/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 50101/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 |_http-title: Site doesn't have a title. 51523/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 51524/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 59100/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:39 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 59101/tcp open http-proxy syn-ack ttl 54 (proxy authentication required) |_http-title: Site doesn't have a title. | fingerprint-strings: | SIPOptions: | HTTP/1.1 407 Proxy Authentication Required | Date: Fri, 23 May 2025 05:37:37 GMT | Proxy-Authenticate: Basic realm="proxy" | Connection: close |_ Content-Length: 0 9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port1001-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A5%P=x86_64-pc-linux-gnu%r SF:(GetRequest,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\r\n" SF:)%r(HTTPOptions,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\ SF:r\n")%r(RTSPRequest,33,"RTSP/1\.0\x20501\x20Not\x20Implemented\r\nconte SF:nt-length:\x200\r\n\r\n")%r(FourOhFourRequest,26,"HTTP/1\.0\x20200\x20O SF:K\r\ncontent-length:\x200\r\n\r\n")%r(SIPOptions,32,"SIP/2\.0\x20501\x2 SF:0Not\x20Implemented\r\ncontent-length:\x200\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port7880-TCP:V=7.94SVN%T=SSL%I=7%D=5/23%Time=683009B0%P=x86_64-pc-linux SF:-gnu%r(GetRequest,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-len SF:gth:\x200\r\n\r\n")%r(HTTPOptions,2F,"HTTP/1\.0\x20400\x20Bad\x20Reques SF:t\r\ncontent-length:\x200\r\n\r\n")%r(RTSPRequest,2F,"RTSP/1\.0\x20400\ SF:x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n")%r(FourOhFourRequest SF:,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n SF:")%r(SIPOptions,2E,"SIP/2\.0\x20400\x20Bad\x20Request\r\ncontent-length SF::\x200\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port9143-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A0%P=x86_64-pc-linux-gnu%r SF:(GenericLines,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x SF:20text/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Ba SF:d\x20Request")%r(GetRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri SF:,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nContent-Length:\x20150\r\n SF:Content-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head SF:><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x SF:20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t SF:\t</body>\n\t\t\t</html>")%r(HTTPOptions,10B,"HTTP/1\.0\x20200\x20OK\r\ SF:nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nContent-Lengt SF:h:\x20150\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html> SF:\n\t\t\t<head><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\ SF:t\t<h1>Node\x20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics< SF:/a></p>\n\t\t\t</body>\n\t\t\t</html>")%r(RTSPRequest,67,"HTTP/1\.1\x20 SF:400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\ SF:r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Help,67,"HTTP/ SF:1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charse SF:t=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(SSLSes SF:sionReq,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text SF:/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20R SF:equest")%r(TerminalServerCookie,67,"HTTP/1\.1\x20400\x20Bad\x20Request\ SF:r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nConnection:\x20clos SF:e\r\n\r\n400\x20Bad\x20Request")%r(TLSSessionReq,67,"HTTP/1\.1\x20400\x SF:20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nCo SF:nnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Kerberos,67,"HTTP/1 SF:\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset SF:=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(FourOhF SF:ourRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri,\x2023\x20May\x2 SF:02025\x2005:38:02\x20GMT\r\nContent-Length:\x20150\r\nContent-Type:\x20 SF:text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head><title>Node\x20E SF:xporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x20Exporter</h1>\n SF:\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t\t</body>\n\t\t\t SF:</html>"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44445-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44446-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44464-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port44465-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port49155-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port49156-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu% SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port OS fingerprint not ideal because: Missing a closed TCP port so results incomplete No OS matches for host TCP/IP fingerprint: SCAN(V=7.94SVN%E=4%D=5/23%OT=1001%CT=%CU=%PV=N%DS=10%DC=T%G=N%TM=68300A01%P=x86_64-pc-linux-gnu) SEQ(SP=100%GCD=1%ISR=100%TI=Z%II=I%TS=A) OPS(O1=M4ECST11NW7%O2=M4ECST11NW7%O3=M4ECNNT11NW7%O4=M4ECST11NW7%O5=M4ECST11NW7%O6=M4ECST11) WIN(W1=FD80%W2=FD80%W3=FD80%W4=FD80%W5=FD80%W6=FD80) ECN(R=Y%DF=Y%TG=40%W=FFF0%O=M4ECNNSNW7%CC=Y%Q=) T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=) T2(R=N) T3(R=N) T4(R=N) U1(R=N) IE(R=Y%DFI=N%TG=40%CD=S) Uptime guess: 28.440 days (since Thu Apr 24 19:06:13 2025) Network Distance: 10 hops TCP Sequence Prediction: Difficulty=256 (Good luck!) IP ID Sequence Generation: All zeros TRACEROUTE (using port 1001/tcp) HOP RTT ADDRESS 1 0.91 ms _gateway (10.199.22.3) 2 0.23 ms rtr-ge-dmarc.tblflp.net (10.199.1.1) 3 ... 4 2.61 ms 71-32-31-17.rcmt.qwest.net (71.32.31.17) 5 10.87 ms 4.68.144.73 6 ... 7 78.26 ms ae3.cr1-was1.ip4.gtt.net (199.229.230.97) 8 16.72 ms ae0.cr5-nyc12.ip4.gtt.net (89.149.140.94) 9 ... 10 18.79 ms 185.228.193.50
Open proxy blocked — Naomi Amethyst 05:46, 23 May 2025 (UTC)
194.233.150.250
A user has requested a proxy check. A proxy checker will shortly look into the case.
- 194.233.150.250 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
Yet another IP abused by BMN123 (see above) and flagged as a proxy by multiple sources. 184.152.65.118 (talk) 06:11, 19 May 2025 (UTC)