Jump to content

Wikipedia:WikiProject on open proxies/Requests/Archives/44

From Wikipedia, the free encyclopedia


PrivateVPN

{{proxycheckstatus}}

62.115.255.160/27 · contribs · block · log · stalk · Robtex · whois · Google
80.239.199.96/27 · contribs · block · log · stalk · Robtex · whois · Google
193.180.119.0/24 · contribs · block · log · stalk · Robtex · whois · Google
217.212.240.64/27 · contribs · block · log · stalk · Robtex · whois · Google
217.212.244.64/27 · contribs · block · log · stalk · Robtex · whois · Google
217.212.245.64/27 · contribs · block · log · stalk · Robtex · whois · Google
45.148.7.0/24 · contribs · block · log · stalk · Robtex · whois · Google
more info
62.115.255.160/27
80.239.199.96/27
193.180.119.0/24
217.212.240.64/27
217.212.244.64/27
217.212.245.64/27
45.148.7.0/24

All these ranges are PrivateVPN. See whois in most of them (PVDATA, PVDATANET, Privat Kommunikation Sverige AB), Spur in the reported IPs (see collapsed box) and DNS records. MarioGom (talk) 21:24, 4 July 2021 (UTC)

152.228.208.0/21

{{proxycheckstatus}}

152.228.208.0/21 · contribs · block · log · stalk · Robtex · whois · Google
152.228.210.107 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan · WorldVPN · fr2.ocservvpn.com
152.228.215.225 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan · WorldVPN · fr3.ocservvpn.com

OVH range hosting WorldVPN. Listing the narrower range found on whois (/21) instead of the wider (/17) which could contain residential subranges. MarioGom (talk) 21:33, 4 July 2021 (UTC)

Handled. GeneralNotability (talk) 13:41, 17 July 2021 (UTC)

ProtonVPN (III)

{{proxycheckstatus}}

162.12.206.0/24 · contribs · block · log · stalk · Robtex · whois · Google · ASN: Serverion
194.31.97.0/24 · contribs · block · log · stalk · Robtex · whois · Google · ASN: Serverion
194.99.44.0/24 · contribs · block · log · stalk · Robtex · whois · Google · ASN: Serverion
46.20.152.0/24 · contribs · block · log · stalk · Robtex · whois · Google · ASN: Doratelekom
more info
162.12.206.0/24
194.31.97.0/24
194.99.44.0/24
46.20.152.0/24

ProtonVPN nodes. The Serverion ranges should be good to hardblock based on previous blocks. I'm not sure about the Doratelekom range. All individual IPs are listed in the collapsed section. MarioGom (talk) 23:06, 4 July 2021 (UTC)

Handled. GeneralNotability (talk) 13:37, 17 July 2021 (UTC)

91.149.252.0/24

{{proxycheckstatus}}

Windscribe VPN. See whois, also DNS for ca.windscribe.com and aq.windscribe.com. Active vandalism today. MarioGom (talk) 16:31, 16 July 2021 (UTC)

@MarioGom:  Done !ɘM γɿɘυϘ⅃ϘƧ 18:08, 16 July 2021 (UTC)

14.192.215.62

{{proxycheckstatus}}

OpenVPN IP. Firestar464 (talk) 12:06, 21 July 2021 (UTC)

Self admitted. --Firestar464 (talk) 06:20, 22 July 2021 (UTC)

  •  Highly likely. Spur is flagging as vpngate and it's lighting up other proxy detection services (plus the admission), but it lacks the two known signatures for that provider. Pink clock Awaiting administrative action – the IP is already gblocked, but please reinforce with a local hardblock (expiry 21 July 2022, 13:31) to match the global one. This is a mixed range, nothing else immediately visible. --Blablubbs (talk) 09:01, 22 July 2021 (UTC)
     Done --Malcolmxl5 (talk) 12:05, 28 July 2021 (UTC)

149.14.226.240/29

{{proxycheckstatus}}

Astrill VPN (AKA Veloxee Corp), see whois. Also see spur. The range is new and has no contributions yet, but given the amount of abuse we see from Astrill, I'd recommend hard-blocking. MarioGom (talk) 16:56, 23 July 2021 (UTC)

41.254.65.39

{{proxycheckstatus}}

Reason: Out-of-the blue Libyan IP makes geeky requests, this one in particular looking rather suspicious. IPQS screams bloody murder, but having been guilty of bad judgement in some recent cases, I'm calling on your expertise. Favonian (talk) 17:40, 26 July 2021 (UTC)

(Non-verified user here) The IP is currently a node for a residential proxy network (verified with spur API), but it's also likely some kind of gateway. That is, long blocks will be ineffective, and it's possible that there's collateral damage if hardblocked. Some other recent IPs in the range (see 41.254.65.0/24) seem to be the same person, and are currently part of the same residential proxy network. MarioGom (talk) 18:21, 26 July 2021 (UTC)
  •  In progress. --Blablubbs (talk) 20:18, 26 July 2021 (UTC)
    • @Favonian: Somewhere between  Unlikely and  Inconclusive. The interest in Indiana public TV stations etc. that can be found on the range is strange, and there is a fair amount of proxies on the continent. However, the only technical signature I can see is a residential proxy service that's far more likely to be bought by companies for data scraping than by individuals for anonymising their browsing traffic. It's possible, but it's far too expensive for most people. There is a non-negligible chance that there is something else running, but if there is, it's not something I can easily get a read on. Closing without action. --Blablubbs (talk) 20:32, 26 July 2021 (UTC)

94.140.8.0/24

{{proxycheckstatus}}

Nord VPN, see whois and spur. Vandalizing right now. MarioGom (talk) 18:55, 26 July 2021 (UTC)

185.5.46.1

{{proxycheckstatus}}

Anonine VPN – see spur. Mojoworker (talk) 05:31, 28 July 2021 (UTC)

The /25 is mostly VPN servers, see results from spur:

spur results for 185.5.46.0/25

--MarioGom (talk) 10:11, 28 July 2021 (UTC)

129.187.244.28

{{proxycheckstatus}}

Caught by proxycheck.io. Firestar464 (talk) 10:49, 30 July 2021 (UTC)

Some services like proxycheck and IPQS are not very reliable. They conflate proxy flags of very different proxy types, and also maintain flags even long after an IP ceases to be a proxy. Spur, which is pretty reliable, does not currently flag this IP. Shodan shows nothing. I have scanned with ike-scan, which catches a lot of VPN, and nothing. I don't see any evidence suggesting this IP is a VPN right now. MarioGom (talk) 11:59, 30 July 2021 (UTC)
Red X Not a proxy, closing. --Blablubbs (talk) 12:05, 30 July 2021 (UTC)

Hide My Ip

{{proxycheckstatus}}

103.25.57.17 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
103.25.57.81 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
162.250.169.162 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
185.82.218.234 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
185.8.61.235 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
194.5.212.22 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
45.84.1.29 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
93.119.104.54 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
93.119.104.58 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Follow up to the previous Hide My IP report. These are unblocked IPs from their basic offering. MarioGom (talk) 19:54, 14 July 2021 (UTC)

I’ve blocked all of these except The underlying 185.8.60.0/22 (talk+ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs) could use a soft- or hardblock as well, as could most ranges in the ASN, which someone else needs to look into. --Malcolmxl5 (talk) 16:08, 1 August 2021 (UTC)
About this /22, here's a VPN node outside the initially reported /24: 185.8.60.29 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan. MarioGom (talk) 07:18, 5 August 2021 (UTC)
That looks straightforward enough. I’ve hardblocked it for two years. --Malcolmxl5 (talk) 10:37, 6 August 2021 (UTC)
Thanks! I think this could be closed already. MarioGom (talk) 13:18, 6 August 2021 (UTC)
Yeah, probably fine to leave the range alone for now, as long as we get the confirmed VPN endpoints. Thank you both, closing. --Blablubbs (talk) 13:20, 6 August 2021 (UTC)

193.111.61.165

{{proxycheckstatus}}

VPN Point. This exit node seems to be used by a cross-wiki UPE sockfarm (Çelebicihan). Other exit nodes seem to be caught by coloblocks already. See spur. Also there is a somewhat reliable fingerprint visible in shodan. MarioGom (talk) 18:05, 1 August 2021 (UTC)

M247

{{proxycheckstatus}}

A few M247 ranges that were not caught by ASNBlock and have active VPNs.. MarioGom (talk) 21:09, 1 August 2021 (UTC)

NordVPN (II)

{{proxycheckstatus}}

Unblocked NordVPN ranges. MarioGom (talk) 21:52, 1 August 2021 (UTC)

5.63.151.76

{{proxycheckstatus}}

TorGuard exit node. 5.63.151.72/29 · contribs · block · log · stalk · Robtex · whois · Google is probably good for a webhost block. MarioGom (talk) 22:48, 1 August 2021 (UTC)

154.17.22.58

{{proxycheckstatus}}

Reason: spammer, hostname host-by.dmit.io. cursory web search on domain name returns "DMIT - High Performance VM in DMIT.IO Cloud Infrastructure" ☆ Bri (talk) 14:26, 6 August 2021 (UTC)

193.105.73.170

{{proxycheckstatus}}

Reason: I came across this self-confessed open proxy owned by BEHOSTINGS; host name resolves to diogenius.net. The range 193.105.73.160/27 has been globally blocked and I've hard blocked the range for two years on that basis but it may be worth checking out the ASN VERIXI SA - I think I see:

Malcolmxl5 (talk) 12:17, 7 August 2021 (UTC)

Several

{{proxycheckstatus}}

  1. 41.36.35.247 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  2. 213.166.77.9 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  3. 197.239.91.241 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  4. 154.62.180.122 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  5. 160.177.234.226 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  6. 119.73.112.16 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  7. 154.232.46.56 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  8. 102.41.170.240 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  9. 41.37.239.214 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  10. 173.76.23.85 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  11. 41.45.224.136 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  12. 41.204.44.235 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  13. 196.170.103.184 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  14. 111.88.112.9 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  15. 24.76.105.82 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  16. 184.146.38.102 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  17. 85.250.178.53 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  18. 93.173.75.187 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  19. 196.170.74.182 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  20. 102.137.102.238 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  21. 197.133.111.173 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  22. 41.142.162.197 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  23. 95.70.154.105 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  24. 156.223.183.228 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  25. 160.176.189.69 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  26. 41.13.114.213 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  27. 154.177.139.53 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  28. 95.158.49.148 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  29. 105.196.223.68 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  30. 77.91.136.105 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  31. 91.148.156.186 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  32. 190.219.207.49 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  33. 65.18.127.93 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  34. 14.192.213.86 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  35. 95.53.18.176 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  36. 49.144.14.219 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Numerous IPs edit warring on the articles Seagate Technology (edit | talk | history | protect | delete | links | watch | logs | views), Education in Northern Ireland (edit | talk | history | protect | delete | links | watch | logs | views) and Coolkeeragh power station (edit | talk | history | protect | delete | links | watch | logs | views), generally around the name of Derry but they also attempt to remove page protection requests to deal with their use of proxiess. FDW777 (talk) 16:13, 11 August 2021 (UTC)

I'll keep adding as necessary, I won't bother updating the list of articles as it doesn't seem necessary. FDW777 (talk) 16:31, 11 August 2021 (UTC)
Some of these are P2P proxies (perhaps they all are); all have been blocked for a week or two. --Malcolmxl5 (talk) 18:56, 11 August 2021 (UTC)
Do I need to keep reporting them here for possible longer-term solutions? FDW777 (talk) 18:58, 11 August 2021 (UTC)
If you don't mind, it would be helpful. I'm still trying to figure out what we are looking at, exactly. MarioGom (talk) 19:01, 11 August 2021 (UTC)
That's no problem at all. 93.173.75.187 added (I'll add a note of what's been added now there's some replies). FDW777 (talk) 19:03, 11 August 2021 (UTC)
196.170.74.182 added. FDW777 (talk) 20:05, 11 August 2021 (UTC)
102.137.102.238 added. FDW777 (talk) 20:15, 11 August 2021 (UTC)
197.133.111.173 added. FDW777 (talk) 20:22, 11 August 2021 (UTC)
41.142.162.197 added. FDW777 (talk) 21:10, 11 August 2021 (UTC)
160.176.189.69 added. FDW777 (talk) 21:34, 11 August 2021 (UTC)
41.13.114.213 added. FDW777 (talk) 22:00, 11 August 2021 (UTC)
154.177.139.53 added. FDW777 (talk) 22:17, 11 August 2021 (UTC)
I only had a cursory glance at the original handful of IPs a few hours ago, and from what I saw there (low confidence for now), I concur with both Mario and Maclolmxl5; this is most likely overwhelmingly P2P proxy usage, and more data is very much welcome. --Blablubbs (talk) 22:36, 11 August 2021 (UTC)
Plus 95.158.49.148 and 105.196.223.68 --Malcolmxl5 (talk) 22:47, 11 August 2021 (UTC)
77.91.136.105 and 91.148.156.186 added. FDW777 (talk) 07:13, 12 August 2021 (UTC)
190.219.207.49, 65.18.127.93, 14.192.213.86 and 95.53.18.176 added. FDW777 (talk) 09:56, 12 August 2021 (UTC)
And 49.144.14.219. FDW777 (talk) 10:01, 12 August 2021 (UTC)

Arbitrary break

  1. 62.74.5.139 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  2. 180.246.16.101 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  3. 85.194.199.215 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  4. 51.253.55.211 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  5. 124.106.150.104 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  6. 180.178.188.98 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  7. 157.42.17.95 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  8. 188.252.196.176 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  9. 180.195.80.123 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  10. 78.81.155.24 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  11. 171.4.227.53 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  12. 112.201.129.251 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  13. 45.229.80.77 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  14. 201.219.103.44 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  15. 223.204.251.254 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  16. 171.100.22.23 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  17. 62.201.192.153 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  18. 118.101.50.67 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  19. 89.28.75.15 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  20. 201.207.239.132 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  21. 216.215.64.198 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  22. 49.228.224.75 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  23. 177.228.6.114 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  24. 218.173.148.222 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  25. 163.47.148.161 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  26. 49.148.117.188 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  27. 190.69.53.36 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  28. 181.199.31.113 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  29. 202.137.135.242 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  30. 58.69.117.72 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  31. 45.4.132.84 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  32. 191.98.180.196 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  33. 75.88.16.45 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  34. 2.75.156.19 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan
  35. 123.231.109.103 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

And more. FDW777 (talk) 10:19, 12 August 2021 (UTC)

+ 216.215.64.198. --Malcolmxl5 (talk) 12:22, 12 August 2021 (UTC)
Added 49.228.224.75. FDW777 (talk) 12:25, 12 August 2021 (UTC)
Added 177.228.6.114 and 218.173.148.222. FDW777 (talk) 12:30, 12 August 2021 (UTC)
Added 163.47.148.161. FDW777 (talk) 12:32, 12 August 2021 (UTC)
Added 49.148.117.188 and 190.69.53.36. FDW777 (talk) 12:42, 12 August 2021 (UTC)
Added 181.199.31.113. FDW777 (talk) 12:44, 12 August 2021 (UTC)
Added 202.137.135.242. FDW777 (talk) 12:45, 12 August 2021 (UTC)
Added 58.69.117.72. FDW777 (talk) 12:56, 12 August 2021 (UTC)
Added 45.4.132.84. FDW777 (talk) 13:02, 12 August 2021 (UTC)
Added 191.98.180.196. FDW777 (talk) 13:07, 12 August 2021 (UTC)
Added 75.88.16.45. FDW777 (talk) 13:16, 12 August 2021 (UTC)
Added 2.75.156.19. FDW777 (talk) 13:20, 12 August 2021 (UTC)
+ 123.231.109.103 --Malcolmxl5 (talk) 13:33, 12 August 2021 (UTC)
Thanks FDW777 and Malcolmxl5. It is obvious it is a P2P proxy as you pointed out, and I think it is a service known to us (don't mention the name on wiki if you know, per WP:BEANS). It is quite frustrating that they are pulling this many unblocked IPs. Let's see if we can improve approach used by ST47ProxyBot. MarioGom (talk) 20:56, 12 August 2021 (UTC)
Thank you all for your efforts, this provides us with a very helpful dataset. There isn't much left we can do here at WPOP, so I'll close this, but we will be using these for future research. --Blablubbs (talk) 10:46, 13 August 2021 (UTC)

185.198.243.0/24

{{proxycheckstatus}}

The /24 is a hosting company ([2]), it has at least 3 ExpressVPN nodes:

The last one was already used for vandalism. MarioGom (talk) 21:17, 13 August 2021 (UTC)

45.138.86.0/24

{{proxycheckstatus}}

VPN nodes

The range is primarily TunnelBear and CyberGhost. MarioGom (talk) 21:19, 13 August 2021 (UTC)

Hardblocked the range. — Preceding unsigned comment added by GeneralNotability (talkcontribs) 13:11, 21 August 2021 (UTC)