Wikipedia:Open proxies noticeboard

Open proxies noticeboard
Shortcuts

The Open proxies noticeboard seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.


Open proxies may be blocked from editing

Reporting

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I.
For block requests:

Verify that the following criterion has been met:

  • The IP has made abusive contributions within the past week
For unblock requests:

Verify that the following criteria has been met:

  • No current criteria
II.

For block requests Replace "IP" below with the IP address you are reporting.


For unblock requests Replace "IP" below with the IP address you are reporting.


III. Fill out the resulting page and fill-in the requested information.
IV. Save the page.

Requests

186.237.103.139

– This proxy check request is closed and will soon be archived by a bot.

Reason: IP information (Special:IPInfo) for a temporary account that has been vandalizing identifies this IP as KOOKEEY_PROXY. Peaceray (talk) 18:51, 16 September 2026 (UTC)

no No action. Unlikely to be proxy use. Same as previously, these are proxies typically used for web scraping and data collection. All the associated TAs geolocating to the same country suggest the user is not hiding their location and that this is dynamic mobile use. — Malcolmxl5 (talk) 13:31, 6 October 2026 (UTC)

172.56.33.190

– This proxy check request is closed and will soon be archived by a bot.

Reason: IP checker says it detects the potential for a proxy, and the IP was used by an LTA. The thing that made me report this one is that the IP address of one of the LTA socks changed mid-edits if you go through their contribs. Jdcomix (talk) 20:13, 19 September 2026 (UTC)

no No action Unlikely to be proxy use. I see what you mean, there’s a switch from a residential broadband connection to a mobile connection in mid-flow but there's very little else to suggest proxy use. --Malcolmxl5 (talk) 09:58, 12 October 2026 (UTC)

165.85.15.212

– This proxy check request is closed and will soon be archived by a bot.

Reason: Palo Alto/GlobalProtect Cloud VPN hit (and BLP vandalism to boot). Netstars22 (talk to me!) 23:45, 9 October 2026 (UTC)

 Completed. Blocked the /18. One of Google's cloud platforms albeit for enterprise users. --Malcolmxl5 (talk) 10:43, 12 October 2026 (UTC)

129.205.124.247

– This proxy check request is closed and will soon be archived by a bot.

Test edit to Talk:Linux, which has a recent history of proxy abuse. See Wikipedia:Sockpuppet investigations/Softwareperson1000 --Guy Macon (talk) 12:41, 16 October 2026 (UTC)

no No action. The IP address has an interesting block log but it seems to me to be a typical CGNAT connection, that is, a dynamic mobile network connection in a developing country where thousands of mobile data users continuously rotate through a small pool of public IPv4 addresses as users moves between cell towers or otherwise reconnect to the network. It is akin to a shared IP address and while it is possible for devices to be used as a proxy node, the device and the user will be long gone from this connection. — Malcolmxl5 (talk) 13:58, 18 October 2026 (UTC)

35.40.70.123

– This proxy check request is closed and will soon be archived by a bot.

Reason: ipcheck.toolforge.org flagged it as a proxy and vpn (merit network), and the TA using the ip (tried to) vandalise a page (see https://en.wikipedia.org/wiki/Special:AbuseLog/45413191), so I'm just going to let someone smarter check this Ednxa (talk) 08:25, 17 October 2026 (UTC)

no No action. A false positive. The flag from IPQualityScore (which is known to produce false positives) is not corroborated by other proxy detection sites. The IP address is owned by a university and is likely a shared IP. — Malcolmxl5 (talk) 10:08, 19 October 2026 (UTC)

Automated lists and tools

See also

Subpages
Related pages
Sister projects (defunct)