Wikipedia

Wikipedia:Open proxies noticeboard

For information about open proxies, see WP:Open proxies.
    Open proxies noticeboard
    Shortcuts

    The Open proxies noticeboard seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

    • If you've been blocked as an open proxy, please see: Help:blocked.
    • To report a proxy check or an incorrect block, see the #Reporting section.

    Open proxies may be blocked from editing


    Reporting

    [edit]

    Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

    File a new report here
    I.
    For block requests:

    Verify that the following criterion has been met:

    • The IP has made abusive contributions within the past week
    For unblock requests:

    Verify that the following criteria has been met:

    • No current criteria
    II.

    For block requests Replace "IP" below with the IP address you are reporting.


    For unblock requests Replace "IP" below with the IP address you are reporting.


    III. Fill out the resulting page and fill-in the requested information.
    IV. Save the page.

    Requests

    [edit]
    This section is transcluded from /Requests. (edit | history)


    188.212.135.0/24

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: IPXO range with ExpressVPN hits Kline • talk • contribs 19:16, 24 January 2026 (UTC)[reply]

    Secfirewallas (AS206092) holds and manages IP addresses, which are then made available for leasing through the IPXO platform, and are utilised by several VPN brands, ExpressVPN being one of them. Malcolmxl5 (talk) 13:34, 26 January 2026 (UTC)[reply]
     Completed. Blocked. Malcolmxl5 (talk) 13:38, 26 January 2026 (UTC)[reply]

    195.86.5.0/23

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: Datacamp range with Surfshark hits Kline • talk • contribs 19:36, 24 January 2026 (UTC)[reply]

     Completed. Blocked. Malcolmxl5 (talk) 15:08, 26 January 2026 (UTC)[reply]

    217.217.116.0/24

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: Global Secure Layer range with NordVPN hits Kline • talk • contribs 19:44, 24 January 2026 (UTC)[reply]

     Completed. Blocked. Malcolmxl5 (talk) 15:09, 26 January 2026 (UTC)[reply]

    45.67.97.0/24

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: Psychz range with ExpressVPN hits Kline • talk • contribs 19:48, 24 January 2026 (UTC)[reply]

     Completed. Blocked. Malcolmxl5 (talk) 15:18, 26 January 2026 (UTC)[reply]

    217.217.121.0/24

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: Global Secure Layer with NordVPN hits.. might be worth checking out the whole 127.127.0.0/16 considering this is the second report involving that range. Kline • talk • contribs 19:52, 24 January 2026 (UTC)[reply]

    Bgp.he identifies the following prefixes in the /16 as assigned to Packethub S.A. Packethub offers colocation and hosting services and is closely associated with major VPN providers, most notably NordVPN. Packethub utilises the Global Secure Layer network.
    Special:Contributions/217.217.112.0/24
    Special:Contributions/217.217.113.0/24 (locally blocked)
    Special:Contributions/217.217.114.0/24 (globally blocked)
    Special:Contributions/217.217.116.0/24
    Special:Contributions/217.217.117.0/24 (locally and globally blocked)
    Special:Contributions/217.217.119.0/24
    Special:Contributions/217.217.121.0/24
    Nord VPNs are observed on all these ranges. — Malcolmxl5 (talk) 11:32, 26 January 2026 (UTC)[reply]
     Completed. All blocked. Also blocked Special:Contributions/217.216.98.0/24. — Malcolmxl5 (talk) 11:33, 26 January 2026 (UTC)[reply]

    24.199.148.218

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: Global Protect Cloud VPN hit. kline / talk / contribs 19:22, 30 January 2026 (UTC)[reply]

    A library using GlobalProtect Portal to provide secure remote access. Malcolmxl5 (talk) 22:05, 30 January 2026 (UTC)[reply]
     Completed. Soft blocked. Malcolmxl5 (talk) 22:10, 30 January 2026 (UTC)[reply]

    72.203.227.121

    [edit]

    – This proxy check request is closed and will soon be archived by a bot.

    Reason: FortiClient VPN hit. kline / talk / contribs 19:25, 30 January 2026 (UTC)[reply]

    This appears to be a church that uses FortiGate for its firewall with a FortiClient VPN as its gateway. FortiClient VPNs require administrator authorisation and authentication and ordinarily, I’d give it a softblock but we have nothing useful from this IP so I’ll give it a hard block. Malcolmxl5 (talk) 21:47, 30 January 2026 (UTC)[reply]
     Completed. Blocked. Malcolmxl5 (talk) 21:49, 30 January 2026 (UTC)[reply]

    Automated lists and tools

    [edit]
    • User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
    • ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
    • IPCheck is a tool that can help provide clues about potential open proxies.
    • Bullseye provides information about IPS, including clues about potential open proxies.
    • whois-referral is a generic WHOIS tool.
    • Range block finder finds present and past range blocks.

    See also

    [edit]
    Subpages
    Related pages
    Sister projects (defunct)