Wikipedia talk:WikiProject on open proxies/Archiv-Index 2

Should I remove them?

I placed two requests, but now, I realised that maybe my system has bypassed the proxy connection, connecting on my regular ISP, which suggest the connection was never done on the two IP. Should I remove or leave both connections there? Fad (ix) 00:38, 10 February 2007 (UTC)

If you don't think they're open proxies after all, feel free to remove them. —{admin} Pathoschild 01:02:51, 15 February 2007 (UTC)

Help

I'd like to get involved with the project, is there any specific area I can help out in? Shadow1 (talk) 12:56, 14 February 2007 (UTC)

<threadjack>I'd like to get involved as well. So, er, same question as above.</threadjack> PTO 21:18, 14 February 2007 (UTC)

If you are adept with PHP and mySQL, the upcoming proxy database is slowly nearing completion and would benefit from a second (or third) developer.

Do you have knowledge of or experience with open proxies? In particular, do you understand the differences between anonymizing networks, open proxies, and zombie computers, and are you familiar with the necessity of proof described at WP:OP#Block? It's essential that possible open proxies not be blocked, since they'll also be blocked on all participating wikis. If you do understand all of this (or study up on it), we also need help confirming and blocking open proxies. :) —{admin} Pathoschild 01:02:11, 15 February 2007 (UTC)

Heh heh, seems like this place isn't for me... :D. Thanks for the help, though. PTO 04:38, 15 February 2007 (UTC)

You're welcome. :) —{admin} Pathoschild 05:02:08, 15 February 2007 (UTC)

I've got a fair amount of knowledge. <tangent>I run a Tor router, so I'm familiar with that aspect of open proxies.</tangent> But I've also looked at the Automation section above, and I think that I might be able to do something similar to that, provided that there is a need for it. I've also got some experience with MySQL, since Shadowbot has a MySQL database behind it. Shadow1 (talk) 13:08, 16 February 2007 (UTC)

I've verified you for the local chapter of the project. If you're interested in helping develop ProxyDB, please leave a message on my discussion page. :) —{admin} Pathoschild 02:02:47, 18 February 2007 (UTC)

Thanks, I'll take a look. Shadow1 (talk) 20:38, 19 February 2007 (UTC)

Anonymous editing sites

Hi. I have listed six IPs from anonymous proxy websites that were open and have now been blocked. Is the correct procedure to list them here (so that they can be reported to other Wikimedia projects) or do I just block them and move on with life? I took a look and most of what is talked about here seems to be geared towards zombie/hacked machines that require investigation as opposed to simple, straight forward anonymizers. Should I report such sites here or just block? --BigDT 06:11, 17 February 2007 (UTC)

Hello. It is even more important to block those, since they're easier to find and use. Please do list them here. —{admin} Pathoschild 02:02:33, 18 February 2007 (UTC)

RSS (etc) feeds?

Does anyone have a tool that's keeping an eye on feeds like the ones on http://tfcsi.info/ ? --jpgordon^∇∆∇∆ 04:47, 21 February 2007 (UTC)

Which backlog tag to use?

Should we use {{Adminbacklog}} or {{Backlog}} when there is a backlog? Jesse Viviano 18:08, 27 February 2007 (UTC)

There are ways non-admins can help, but the backlog essentially requires someone with the ability to block (and anyway most people, admins or not, who would be "experienced" enough to clean up an article would have no idea what to do to check an open proxy). —Centrx→talk • 18:11, 27 February 2007 (UTC)

That is, this is a back-end task that is totally unlike anything else listed by {{backlog}}, and even if someone were competent to do it, they would need to be specifically trusted in order to be at all useful. —Centrx→talk • 18:22, 27 February 2007 (UTC)

Suggestion for a subpage

It would be nice if someone created a subpage of Wikipedia:WikiProject on open proxies to show others how to check for proxies manually (besides web-based CGI proxies, which anyone with average Joe computer smarts can check). I would like to check them, but I do not know how to scan them manually. Jesse Viviano 21:07, 8 March 2007 (UTC)

Coordinated attack on my user page, please look into this

• 71.97.33.3 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)
• 84.0.217.168 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)
• 208.120.16.193 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)
• 199.126.228.3 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)
• 82.163.38.32 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)
• 146.145.214.190 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)
• 84.64.51.100 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Part of a coordinated attack on my user page, probably an open proxy--Heliac 16:08, 30 March 2007 (UTC)

I've added these to the project page where it will hopefully be noticed (If I don't get around to checking them myself first) --Michael Billington (talk) 12:43, 31 March 2007 (UTC)

TOR confusion

WP:TOR claims that TOR nodes should be soft blocked, however it appears that this isn't implemented. Could someone please sort this out? Thanks. Anon TOR user 23:25, 16 April 2007 (UTC)

It doesn't say that they should be softblocked, and more likely they should not be, because they are used by vandalizing accounts. Anyway, blocks are done individually, per IP, so this IP was hardblocked and there is no way to suddenly make all the Tor blocks into softblocks. —Centrx→talk • 22:17, 21 April 2007 (UTC)

Online NMAP

Copied from m:Meta talk:WikiProject on open proxies#Online_NMAP

Well, since no one else has offered, I went ahead and set one up. I've just finished configuring it for OP scanning (though I'm open to suggestions as to how to further fine-tune it), and I'm trying to keep it as utterly secure as possible. It will be running with root access; however, I've disabled loopback/localhost scans and every other dangerous exploit I could think of, and I'm going to be restricting access only to OP verified users of the MetaWikiProject and its sister projects. To request a password, please e-mail me. Details can be found here. I'll post this to enwiki too. AmiDaniel 00:51, 24 April 2007 (UTC)

12,640 open proxies blocked on fr.wikipedia but not here

See this list compiled 13 May 2007 of IPs blocked as open proxies on the French Wikipedia but not on this one:

• meta:WikiProject on open proxies/Blocked on frwiki
  • discussion: meta:Talk:WikiProject on open proxies#Huge update (permanent link)

I've duplicated the list on subpages at:

• User:A. B./Sandbox10#12,640 open proxies from fr.wikipedia (permanent link)
  • Unlike the Meta list, the one I constructed uses includes {{IPvandal}} links for each IP; example:
    • 127.0.0.1 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

I'm slowly working through the first 1000 annotating which IPs have been used on en.wikipedia for spamming or vandalism. I'm not an admin, so I can block problem IPs I find, but someone can work through my annotations.

My intention is to identify domains spammed through open proxies and take them to be blacklisted at meta:Talk:Spam blacklist. The list of IPs is a sort of byproduct of that effort.
--A. B. ^(talk) 18:21, 23 May 2007 (UTC)

I did this on Wikiversity with over 15,500 IPs in January, you'll be surprised how fast it can be when you put your mind to it. --Michael Billington (talk) 08:35, 25 May 2007 (UTC)

Please note that I can screen edit histories for each and comment but that I can't do more than that; I have neither admin nor verified user powers. So far, I've screened about 500 and noted the active, problematic IPs for someone else to follow up on. --A. B. ^(talk) 12:31, 25 May 2007 (UTC)

Old IP talk page "cleanup" is deleting open proxy notices

I've been going through the French list of open proxies and I noticed that open proxy notices had been deleted after a few months as part of "old IP warning cleanup" by bots. Those are probably not notices anyone should delete but I'm not sure bots are very judicious.

This happens when the OP notice is only put on the talk page and then the user page is redirected to the talk page.

I suggest also leaving the OP notice on the user page; otherwise, there's no obvious record of any open proxy and it wastes time when people are going through lists (such as this one) looking for open proxies left to block. Alternately, train the bots to leave OP notices alone. --A. B. ^(talk) 13:13, 25 May 2007 (UTC)

Question

I have been dealing with a serial vandalizer who uses Open Proxies to continue to edit the english Wikipedia since being blocked. A comment from another user about the possible source of his IP addresses being a list on a proxy website. Would it be possible to use that list to proactively block Open proxies before they have a bite at the apple, so to speak? here is the list from the site we believe the user to be using SirFozzie 06:43, 15 June 2007 (UTC)

Sure. Go for it. All the ones I tried on that list are already blocked though. —Centrx→talk • 07:03, 15 June 2007 (UTC)

The latest one he's using is from a site called "ConcealMyIP.com".. Guy blocked the IP, but not sure if it uses other IP's in that range. SirFozzie 07:13, 15 June 2007 (UTC)

13 open proxy candidates to check

13 IPs registered on more than one continent attacked a number of Meta-Wiki pages within a few minutes today. I listed all 13 at meta:WikiProject on open proxies however it's not clear that's a very active project. If they aren't checked there within a day or two, some verified user here may wish to check and block them on en.wikipedia. --A. B. ^(talk) 18:51, 19 June 2007 (UTC)

Even though I'm not a verified user...

I've applied to be a verified user, but haven't been approved yet. I already have a port scanner, would anyone mind if I started checking those IPs out to help clear the backlog? Nwwaew (Talk Page) (Contribs) (E-mail me) 19:10, 1 July 2007 (UTC)

The purpose of verification is to verify that you are trustworthy and technically competent. —Centrx→talk • 18:53, 3 July 2007 (UTC)

I know, still, theres no harm in asking, is there? Also, could someone go to the talk page for the verified users list? Theres another person on there who wants to become one besides me. Nwwaew (Talk Page) (Contribs) (E-mail me) 14:15, 5 July 2007 (UTC)

Dynamic IP 84.158.*.* in use by wacky German Astronomy club

I need to confirm that I'm handling this in the right way, please.

Many of the physics pages, associated with cosmology and relativity especially, are being edited by a very enthusiastic individual, W. Kehler; and possibly some associates in his German amateur astronomy club, though Kehler is clearly the main contributor. The club PCs use dynamic IP addresses, as Kehler has freely acknowledged. He did offer to use club computers with a static IP instead, some time ago, but no-one took him up on this.

In the meantime, the edits are coming from 84.158.*.* into 17 different articles that I know of, and possibly more. The editor is working in good faith to improve the articles, but in fact he is making them much worse, for several reasons.

• His English is terrible.
• His physics is even worse.
• He generally does not discuss edits in talk pages until someone notices and starts to revert.
• When he gets reverted, the "discussion" he engages is a rather incoherent set of complaints about censorship and unfair treatment of dissent from Big Bang cosmology and about ill-informed people changing stuff they don't understand, and so on.

So far, there have probably been a couple of WP:3RR violations; but not many. He's not someone that needs to be banned, but just another WP:POV editor who has a bee in his bonnet about a field of science he things is all wrong. The problem is that the dynamic IP makes him very very hard to keep track of. The acknowledgement of the use of dynamic IP on the computer can be found here: end of old FURG notice board. This editor has complained of unfair treatment also at archived Wikiquette alerts for May 2007, and mentioned their use of a dynamic cluster.

Should I report every IP I have found? All the ones I have checked do show up in the CWI listings in two or three places. So far I have made 166 different reports. I now have 19 more; but I am concerned that I might not be a "verified" user for making these reports, or that it is overkill to report every single one of them. Please advise! —Duae Quartunciae (talk · cont) 12:10, 24 July 2007 (UTC)

• You do not have to be a verified user to make a report, only a verified user to check them. Checking an IP takes time, depending on each individual case. IP's should be reported if there is good evidence that, the IP in question is an open proxy. Hope this helps.

Thanks. Can you help me with terminology please? The IPs in use here are "dynamic IP"s. My understanding is that this is indeed open proxy, but I am not sure. Is "dynamic IP", where you connect by a different IP everytime, an example of the use of open proxy? —Duae Quartunciae (talk · cont) 22:47, 24 July 2007 (UTC)

Not in general, no. For a definition, see open proxy. —Ilmari Karonen (talk) 22:56, 24 July 2007 (UTC)

I don't understand, then. It seems to me that the use of a dynamic cluster by the Astronomy club suffers from the problems that make management almost impossible. The club is now in a kind of edit war at Anti-gravity. If there is a WP:3RR violation, how could it be handled? There is getting on for 200 different IP addresses being used, and it looks to me that they are being provided for use by some kind of general server of IP addresses. I just checked one of the many addresses I have reported; it shows up at dnsbl.sorbs.net and at dynamic.spamlists.tqmcube.com —Duae Quartunciae (talk · cont) 23:10, 24 July 2007 (UTC)

The latter listing, at least, simply means that the address is a dynamic IP (which you knew already). I suspect the SORBS listing is also due to nothing more than that. What you'd want to request, if this editor is indeed being disruptive, is a temporary range block. —Ilmari Karonen (talk) 23:23, 24 July 2007 (UTC)

Thanks. This is going to be very frustrating. Surely I will not be the only person who thinks editing Wikipedia from a dynamic IP is a really bad idea. I'd like to recommend that editing would only be permitted through a user account. But I guess this is not the place to discuss it. Thanks for your help! —Duae Quartunciae (talk · cont) 00:11, 25 July 2007 (UTC)

As a side-note SORBS shouldn't be used as an authoritative source, there's been criticisms of listings and de-listing problems. Q ^{T C} 17:28, 1 August 2007 (UTC)

Cleanup

Few things.

• This talk page could use a good archivin' lots of old discussion here.
• What exactly needs done on the project page? I've went through and nmap'd all the ones to be tested and posted the results that I got. Anything need moved around? Cleaned? Re-Tested? Want to get this caught up :) Q ^{T C} 10:19, 4 August 2007 (UTC)

The whole project page could do with a cleanup - IPs which have been reviewed need clearing out of the top section and either removed permanently or moved to one of the waiting sections as appropriate. IPs which need blocking or unblocking need identifying, and ones which have been blocked need moving to, errr, somewhere else. The page is very long, but is actually relatively up to date, bar some waiting. IPs tend to hang around a long time because there can never be conclusive evidence that an IP is not an open proxy. Instead we either wait for conclusive evidence that it is an open proxy or just get bored checking. For example, there's quite a lot of unblocked spammers currently in the list which are probably using zombies. They could do with a re-check for open proxies. -- zzuuzz ^(talk) 14:39, 10 August 2007 (UTC)

Is there a way to automate such tedious chores? --Aarktica 21:15, 18 August 2007 (UTC)

Keeping the page clean would seem to be an ideal task for a bot. -- zzuuzz ^(talk) 09:56, 19 August 2007 (UTC)

Yes, but is it actually possible? The reason I ask about this is because it appears there are limits to what can be automated. Take the EAR page for example; it just seemed easier to manually archive the requests due to the complex process involved.

I would be more than happy to help archive this talk page. However, if an automated archiving process is deemed satisfactory, that would be just as fine. Cheers, --Aarktica 13:41, 19 August 2007 (UTC)

There is some human judgment involved here, and I wouldn't like to see a bot which actually blocks proxies or anything, but it can be tedious checking which are blocked and moving them around to the right section. I think something like the WP:RFPP bot could probably be employed to help with the archiving - dependent on templates added by the checkers and whether the IP is blocked or not, for example. Archiving this talk page is another issue, and there are bots available for that, or you can just carry on and do it, though it's not that really long and it can help to have the old conversations around. -- zzuuzz ^(talk) 13:52, 19 August 2007 (UTC)

I would be more than happy to help with the tedious checking if needed; is any special access required for that? As for archiving the talk page, I can link to the page containing the particular section that is archived via the edit summary. That way, it will be readily available from the history log. --Aarktica 14:24, 19 August 2007 (UTC)

The contributions to this page since its inception up until May 2007 have been archived. Given the rate of activity, it might be sufficient to have a year's worth of archives on each subpage before starting a new one. --Aarktica 23:31, 23 August 2007 (UTC)

List of 200+ open proxies

I have downloaded the list from http://www.gmedya.com/proxy and reformatted it to facilitate checking open proxies at:

• User:A. B./Sandbox15 (permanent link)

I checked the histories of the first 10; 6 have been blocked here as open proxies but 4 have not. All of these remaining 4 have shown problematic behaviour either here on en.wikipedia or elsewhere.
--A. B. ^(talk) 18:05, 18 August 2007 (UTC)

Follow-on to 'Suggestion for a subpage'

Five months ago, a question about having a HOWTO subpage on checking for proxies manually went unanswered. Feedback on the question would be appreciated. --Aarktica 00:30, 24 August 2007 (UTC)

Blocking only anonym edits possible?

Hi all, may I suggest that complete blocking of Java Anon Proxy proxies will be limited to blocking of people not signed in? "The Free Encylopedia" should not block people trying to access free content on a free base. The German Wikipedia allows that. -- Fleasoft 12:06, 31 August 2007 (UTC)

Open proxies are regularly used by sockpuppets, so only blocking anonymous users wouldn't help. Blocks only apply to editing, so the ability of "people trying to access free content on a free base" is not restricted in any way. --Gribeco 16:48, 31 August 2007 (UTC)

Regular retesting?

Do you guys ever retest the IP's you have blocked? You have IP's blocked as far back as 2004. Maybe you should retest at least once a year.--76.220.202.53 19:22, 3 September 2007 (UTC)

Currently, they are only re-tested if there is a request of some sort. Even keeping up with the newly reported ones is a huge burden, let alone checking all the old ones. Properly, IPs blocked as open proxies should not be blocked indefinitely, but they were before almost always, and many times still are. The ones that are blocked indefinitely I have in the past and will again, check and either unblock or re-block with an expiry. —Centrx→talk • 04:29, 4 September 2007 (UTC)

Tor

So if I log in while using Tor will my account be banned assuming I created it with a non-blacklisted IP? —Preceding unsigned comment added by 84.128.72.97 (talk) 23:10, 8 September 2007 (UTC)

No. Your account will not be affected if you login through tor, but you still won't be able to edit since tor IPs are blocked. —Crazytales talk/desk 23:13, 8 September 2007 (UTC)

You will be autoblocked by association I'd assume. —Preceding unsigned comment added by 192.35.100.1 (talk) 20:30, 10 September 2007 (UTC)

Nope. IPs are blocked because they're used by a blocked account. Accounts aren't blocked because they're logged into from a blocked IP. —Crazytales talk/desk 20:47, 10 September 2007 (UTC)

Notes

What exactly are we expected to write in the notes column? Also is being blocked a firewall typical of a proxy? Deniz^T_C 09:58, 5 October 2007 (UTC)

The notes column should have a description of why you might suspect it's an open proxy, for example if the same editor is using IPs from several ISPs or countries at the same time. It's also used for the response to the check. It is probably safe to say that a reliable indication of an open proxy is that it can be accessed in some way without being blocked by a firewall, even though a firewall may sometimes be present. It is quite common for traceroutes to get blocked by a firewall at some point in the chain, but it doesn't usually mean anything. -- zzuuzz ^(talk) 10:06, 5 October 2007 (UTC)

Thanks. And the bot found it 'innocent'. Will you check it anyway? I haven't withdrawn my request. Deniz^T_C 12:42, 5 October 2007 (UTC)

Dynamic IPs

I ran Category:Open_proxies_blocked_on_Wikipedia against the SORBS dynamic IP list (dul.dnsbl.sorbs.net) and found over 7,000 matches, i.e. dynamic IPs that are blocked as open proxies.

Samples: 12.223.28.68, 201.255.27.35, 218.239.2.126, 58.63.122.58, 68.196.49.148, 78.48.6.243 (I can post the full list if there's interest.)

Some of these are Tor exit nodes that will be automatically unblocked. What should we do about the others? --Gribeco 02:59, 8 October 2007 (UTC)

Start listing them here to be checked. -- zzuuzz ^(talk) 08:26, 8 October 2007 (UTC)

Here is the list: Wikipedia talk:WikiProject on open proxies/Dynamic IPs blocked as of 7 October 2007 -Gribeco 23:52, 8 October 2007 (UTC)

User Talk:121.217.126.200

This IP seems to be reserved by IANA itself [1], yet it is a vandalism account. Is this normal? Deniz^T_C 21:26, 8 October 2007 (UTC)

Samspade does that quite frequently:

inetnum:      121.208.0.0 - 121.223.255.255
netname:      TELSTRAINTERNET45-AU
descr:        Telstra Internet
...

-- zzuuzz ^(talk) 21:30, 8 October 2007 (UTC)

208.77.91.8 (talk · contribs)

Are pay proxy services consider acceptable? 208.77.91.8 (talk · contribs) maps to megaproxy.com, which is a pay service. This particular user is obviously 69.149.76.114 (talk · contribs) editing through a proxy. But should IPs mapping to this proxy service be blocked or are they acceptable since you have to pay for access and your average vandal isn't going to do that? --B 15:25, 11 October 2007 (UTC)

Your average vandal won't, but your average banned sockpuppeteer might. Vandals are easy to block as they come; they are somewhat secondary to sockpuppeting. Mr.Z-man 18:41, 26 October 2007 (UTC)

geobytes

I added recently two socks of User Talk:Sstakis, as the editor is from Macau and the ips are, according to Geobytes, from India. But when I clicked the whois link after adding the ips, I saw that they were from Macau. What is the reliability of Geobytes? Thanks. Deniz^T_C 17:57, 19 October 2007 (UTC)

Automatic archiving of WP:OP

I was thinking that perhaps I could have ClueBot II go through and archive any report still listed 5 days after being handled ({{oproxy}}, {{notaproxy}}, {{inconclusive}}, {{thrown out}}) by moving the reports to /Open, /Closed, /Inconclusive, and /Thrownout respectively. Also, /Unblock for the IP addressed requesting unblock. What does the community think about this? -- Cobi^(t|c|b|cn) 23:52, 19 October 2007 (UTC)

Sounds good to me. Carbon Monoxide 03:48, 20 October 2007 (UTC)

I agree - WP:OP loads up slowly on my computer, and I've got a cable connection. -Jéské ^{(Blah v^_^v)} 04:00, 20 October 2007 (UTC)

It would help lots if the page was cleared. It would also be useful if the bot could check if the IPs have been blocked or still need to be blocked/unblocked after being checked. -- zzuuzz ^(talk) 19:31, 22 October 2007 (UTC)

Reporting should be outside the project

I suggest the reporting should be separated from the Wikiproject page, possible to Wikipedia:Open proxies reports _→AzaToth 22:38, 22 October 2007 (UTC)

Why? (not rhetorical :D) AmiDaniel (talk) 18:34, 26 October 2007 (UTC)

"trusted proxies"/x-forwarded-for

Where is the list of "trusted proxies" that the x-forwarded-for header can be used for kept, and what's the process for getting something checked for that? —Random832 20:47, 7 November 2007 (UTC)

MadmanBot task request

On behalf of the Bot Approvals Group, — madman bum and angel 19:26, 13 November 2007 (UTC).

nocharge.com

nocharge.com seems to me to be an open proxy; could I have a second opinion please? --jpgordon^∇∆∇∆ 15:02, 15 November 2007 (UTC)

I think I declined an unblock request on one of their IPs after reviewing their website. If I understood it correctly, you download their software and then can connect via telephone to one of their servers, no registration required. It seems like it would take about 5 minutes to set up. Practically it would only be used by people for whom it would be a local call or who have unlimited long distance, but technically it could be used by anyone. Mr.Z-man 17:02, 15 November 2007 (UTC)

Proxy breaking articles?

The article text "| location" has been changed to "| location = /dmirror/http/en.wikipedia.org/w/" for several anonymous edits. Here are example diffs: [2], [3], [4] (multiple edits).

A bug report has been filed [5] and it was suggested that this is caused by a poorly coded web proxy. Please could somebody take care of that. Сасусlе 04:09, 6 December 2007 (UTC)

Addded to the list on article page. Сасусlе 19:51, 8 December 2007 (UTC)

Yes, it's a badly coded proxy, and it's open, I have range blocked 64.62.138.0/26 as a result. -- zzuuzz ^(talk) 20:36, 8 December 2007 (UTC)

Proposed template change

I'm proposing an additional category in the Template:Editabuselinks to reduce the number of posts at WP:AN and WP:AN/I, please feel free to comment here User:Mbisanz/TemplateSandbox. MBisanz ^talk 13:19, 5 January 2008 (UTC)

Hi

I'm a proxy, please block me now! --8.17.168.106 (talk) 07:38, 7 January 2008 (UTC)

Possible open proxy? Help needed

Hello, I don't know what to do, so I'll just bring this matter here and hopefully someone who knows what to do can deal with it. I left a vandalism warning on the talk page of an IP earlier today. Upon checking back, I discovered an admission that the IP was an open proxy. Here's the talk page: User talk:68.94.60.201. -MBK₀₀₄ 00:17, 21 January 2008 (UTC)

Request for "Verified User" status

May I request Verified User status? It says on Wikipedia:WikiProject on open proxies/verified users to see the main page, but the main page has nothing about becoming a verified user. Calvin 1998 ^Talk _Contribs 02:48, 8 February 2008 (UTC)

Active Members

Are there ANY actual members of this WikiProject out there? Calvin 1998 ^Talk _Contribs 08:54, 8 February 2008 (UTC)

Yes, me, Zzuuzz, and Crazytales. Though, Crazytales hasn't edited the page in a while. Those are the ones I know of. And, of course, ClueBot IV and ClueBot. -- Cobi^(t|c|b) 01:53, 9 February 2008 (UTC)

I havent done any editing on the page in a bit due to other time constaints but still willing to do some work, currently working on a better TOR checker. Q ^{T C} 22:58, 11 February 2008 (UTC)

Yes, I go through them from time to time. I generally make sure that IPs are listed for some time, due to the very high dropout rate of open proxies. The meta-wiki aspect of this project appears dead however. There are divergent policies on open proxies between wikis, suggestions for cross-wiki blocking, and a policy here which places less emphasis on prohibition. I wonder what the future of this project is. -- zzuuzz ^(talk) 12:07, 15 February 2008 (UTC)

I'd join and help out, but nobody has responded to my requests to add me to the verified users list. (I'm a huge computer nerd, have experience with proxies and interpreting portscans, and have Nmap and Tor installed on my computer) Nwwaew (Talk Page) (Contribs) (E-mail me) 00:55, 17 February 2008 (UTC)

TOR

I was wondering, if I could get some of the admin members of this project, to take a look at User:SQL/Funky TOR, and, consider reviewing some of these blocks. Yes, some listed are still TOR (not many, I estimate about a 2% failure rate), due to network congestion, IP hopping, flipping, or, etc. I'd appreciate the help, if any of you have the time to do so, thanks! SQL^{Query me!} 07:23, 9 February 2008 (UTC)

Here is what I came up with. Q ^{T C} 03:06, 15 February 2008 (UTC)

And this page for all the TOR nodes that are unblocked. Q ^{T C} 04:05, 15 February 2008 (UTC)

To reply to myself again, just what is the policy for unblocking ex-TOR nodes? Surely they dont stay banned indef? Q ^{T C} 04:07, 15 February 2008 (UTC)

We've been unblocking them, mostly. Careful to check it out, however. In some cases, some users actually blocked them (say, as "Blocked proxy") for other reasons, and then, a third party came by and tagged the page as {{tor}}. I usually check over the talkpage, the block log, the torstatus, and whatnot, when unblocking. SQL^{Query me!} 11:17, 15 February 2008 (UTC)

I wonder why I come up with more than you, as far as blocked {{tor}} goes? BTW, you may want to limit that to the user_talk namespace :) I doubt anyone's monobook is blocked :) How are you determining torstatus? I use a combination of DNSBL's SQL^{Query me!} 11:19, 15 February 2008 (UTC)

A fresh copy of the Tor Directory, it's updated regularly and in MySQL so its easy to query against, got my copy here Q ^{T C} 16:53, 15 February 2008 (UTC)

From the blocking policy: "blocks on open or anonymous proxies should be undone once it is confirmed that they have been closed;". I would suggest some caution in removing blocks, especially relying on online checkers such as as3344.net or DNSBLs. Some admins will indef-block any IP which even looks a little like an open proxy, or is highlighted in a DNSBL list for even a day, whereas other admins may make more extensive checks the results of which may not be immediately obvious. Of particular relevance are asynchronous exit nodes (eg 83.15.197.2) and by the same measure IPs which could be CGI proxies, and anonymisers such as anonymizer.com, or even other types of open proxy (which are also immune to port scanning). Such things are usually noted in the block log or talk page, but may not always be obvious. -- zzuuzz ^(talk) 12:07, 15 February 2008 (UTC)

Proposed change to {{Proxyip2}}

I'm suggesting a change to Proxyip2 (and have asked recent users to opine here)...

Line 13 (TOR link) is currently http://www.ippages.com/?ip

I'm suggesting a change to http://www.as3344.net/is-tor/?args

I find the "Kewlio.net Limited [AS3344] -- TOR node checker" to be much simpler to check just for a TOR check, rather than having to sift through the ippages to find the right line... Comments, suggestions, would be greatly appreciated! SkierRMH (talk) 04:10, 16 February 2008 (UTC)

I do too, and it can't be that controversial of a change. If you could also put some sort of open proxy checker on that (if it's even possible), that would also be appreciated. Calvin 1998 ^Talk _Contribs 04:29, 16 February 2008 (UTC)

I agree, the AS3344 one is MUCH simpler. SQL^{Query me!} 05:44, 16 February 2008 (UTC)

Speedy Delete Err, I mean, go for it. Agree Q ^{T C} 07:33, 16 February 2008 (UTC)

I've absolutely no objections if it makes things easier for the checkers. -Jéské ^{(Blah v^_^v)} 08:41, 16 February 2008 (UTC)

If the new one is reliable, better and thrust worthy, I have no object to the change. --Appletrees (talk) 10:33, 16 February 2008 (UTC)

Yes, change it it's a better link, although it is less conclusive - with as3344 you have to make a further check on what exits the node allows. If you're changing the template I would also suggest replacing the link to cwi[6] with one to robtex[7] as this provides similar information but better access to DNS and c-net info which is useful for web proxies and anonymisers. -- zzuuzz ^(talk) 12:35, 16 February 2008 (UTC)

If you're wanting something like that, I could throw up something similar to as3344, but with the exit information. Q ^{T C} 15:09, 16 February 2008 (UTC)

Try this Q ^{T C} 15:58, 16 February 2008 (UTC)

I like the Tor checker from The Dark Citadel, due to the detailed information it gives. Nwwaew (Talk Page) (Contribs) (E-mail me) 00:56, 17 February 2008 (UTC)

The Dark Citadel does give good detailed info - stable & reliable? SkierRMH (talk) 03:57, 17 February 2008 (UTC)

That's the only downside, it's my site, and I'm not a major ISP like kewlio so I can't guarantee uptime quite as well as they can. Q ^{T C} 14:01, 17 February 2008 (UTC)

While I know little about the topic, I've certainly found the Kewlio link simpler. Dan (talk) 04:10, 18 February 2008 (UTC)

Without any replies for about a week, and the general consensus being it was a good idea, I went ahead a made the change, put a link to this discussion in the edit summary so anybody who disagrees can find it. Q ^{T C} 06:31, 24 February 2008 (UTC)

List of 131 open proxies

I stumbled across a list at www.blogging4.com and I have posted it at User:A. B./Sandbox4. I don't have access to efficient port-scanning tools and I am not a verified user. On top of that, I'm tied up with other things.

If someone works on this list, please mark it up as you go so that others won't cover the same ground.

Happy hunting/scanning. --A. B. ^(talk) 14:39, 25 February 2008 (UTC)