Wikipedia:Open proxies noticeboard

For information about open proxies, see WP:Open proxies.

"WP:OP" redirects here. For the first comment in an internet thread, see Original post and Wikipedia:Glossary § OP.

Open proxies noticeboard

The Open proxies noticeboard seeks to identify, verify and block open proxies and anonymity network exit nodes. To prevent abuse or vandalism, only proxy checks by verified users will be accepted. All users are welcome to discuss on the talk page, report possible proxies, or request that a blocked IP be rechecked.

• If you've been blocked as an open proxy, please see: Help:blocked.
• To report a proxy check or an incorrect block, see the #Reporting section.

Open proxies may be blocked from editing

Reporting

Please report IP addresses you suspect are open proxies below. A project member will scan or attempt to connect to the proxy, and if confirmed will block the address.

File a new report here
I.	For block requests: Verify that the following criterion has been met: The IP has made abusive contributions within the past week For unblock requests: Verify that the following criteria has been met: No current criteria
II.	For block requests Replace "IP" below with the IP address you are reporting. For unblock requests Replace "IP" below with the IP address you are reporting.
III.	Fill out the resulting page and fill-in the requested information.
IV.	Save the page.

Verified Users/Sysops Templates

• IP is an open proxy {{Proxycheck|confirmed}} for confirmed open proxies and Tor exit nodes.
• Likely IP is an open proxy {{Proxycheck|likely}} for likely open proxies and Tor exit nodes.
•  Possible IP is an open proxy {{Proxycheck|possible}} for possible open proxies and Tor exit nodes.
•  Unlikely IP is an open proxy {{Proxycheck|unlikely}} for unlikely open proxies and Tor exit nodes.
• Not currently an open proxy {{Proxycheck|unrelated}} for IP's confirmed not to be an open proxy or Tor exit node.
• Inconclusive {{Proxycheck|inconclusive}} for IP's that are inconclusive.
• Declined to run a check {{Proxycheck|decline}} to decline a check.
• Open proxy blocked {{Proxycheck|blocked}} for open proxies and Tor nodes that have been blocked. Please add this if you block the IP.

Requests

186.237.100.170

– This proxy check request is closed and will soon be archived by a bot.

• 186.237.100.170 · talk · contribs · block · block log · active blocks · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: IP information (Special:IPInfo) for a temporary account that has been vandalizing identifies this IP as YILU_PROXY. Peaceray (talk) 18:48, 16 September 2026 (UTC)

No action. Unlikely to be proxy use. These are proxies typically used by businesses for web scraping and data collection. 17 associated TAs geolocating to the same country suggest the user is not hiding their location and that this is dynamic mobile use. — Malcolmxl5 (talk) 19:56, 3 October 2026 (UTC)

186.237.100.243

– This proxy check request is closed and will soon be archived by a bot.

• 186.237.100.243 · talk · contribs · block · block log · active blocks · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: IP information (Special:IPInfo) for a temporary account that has been vandalizing identifies this IP as YILU_PROXY, 123_PROXY, LUMINATI_PROXY, & OXYLABS_PROXY. Peaceray (talk) 18:50, 16 September 2026 (UTC)

No action. Unlikely to be proxy use. These are proxies typically used by businesses for web scraping and data collection. 17 associated TAs geolocating to the same country suggest the user is not hiding their location and that this is dynamic mobile use. — Malcolmxl5 (talk) 20:00, 3 October 2026 (UTC)

186.237.103.139

– This proxy check request is closed and will soon be archived by a bot.

• 186.237.103.139 · talk · contribs · block · block log · active blocks · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: IP information (Special:IPInfo) for a temporary account that has been vandalizing identifies this IP as KOOKEEY_PROXY. Peaceray (talk) 18:51, 16 September 2026 (UTC)

No action. Unlikely to be proxy use. Same as previously, these are proxies typically used for web scraping and data collection. All the associated TAs geolocating to the same country suggest the user is not hiding their location and that this is dynamic mobile use. — Malcolmxl5 (talk) 13:31, 6 October 2026 (UTC)

172.56.33.190

– This proxy check request is closed and will soon be archived by a bot.

• 172.56.33.190 · talk · contribs · block · block log · active blocks · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: IP checker says it detects the potential for a proxy, and the IP was used by an LTA. The thing that made me report this one is that the IP address of one of the LTA socks changed mid-edits if you go through their contribs. Jdcomix (talk) 20:13, 19 September 2026 (UTC)

No action Unlikely to be proxy use. I see what you mean, there’s a switch from a residential broadband connection to a mobile connection in mid-flow but there's very little else to suggest proxy use. --Malcolmxl5 (talk) 09:58, 12 October 2026 (UTC)

165.85.15.212

– This proxy check request is closed and will soon be archived by a bot.

• 165.85.15.212 · talk · contribs · block · block log · active blocks · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Palo Alto/GlobalProtect Cloud VPN hit (and BLP vandalism to boot). Netstars22 (talk to me!) 23:45, 9 October 2026 (UTC)

 Completed. Blocked the /18. One of Google's cloud platforms albeit for enterprise users. --Malcolmxl5 (talk) 10:43, 12 October 2026 (UTC)

Automated lists and tools

• User:AntiCompositeBot/ASNBlock maintained by User:AntiCompositeBot is a list of hosting provider ranges that need assessment for blocks that is updated daily. Admins are encouraged to review the list and assess for blocks as needed. All administrators are individually responsible for any blocks they make based on that list.
• ISP Rangefinder is a tool that allows administrators to easily identify and hard block all ranges for an entire ISP. It should be used with extreme caution, but is useful for blocking known open proxy providers. All administrators are individually responsible for any blocks they make based on the results from this tool.
• IPCheck is a tool that can help provide clues about potential open proxies.
• Bullseye provides information about IPS, including clues about potential open proxies.
• whois-referral is a generic WHOIS tool.
• Range block finder finds present and past range blocks.

See also

Subpages

• Information for blocked users
• List of users who can verify proxies

Related pages

• Policy on open proxies
• Open proxy detection
• Guide to checking open proxies
• Proxy check result templates
• Advice to users using Tor to bypass the Great Firewall
• meta:XFF project

Sister projects (defunct)

• Meta-Project
• Wikisource
• Wikiversity
• Wiktionary