Wikinotícias:Detecção de proxies abertos/Explicação

Origem: Wikinotícias, a fonte de notícias livre.
Saltar para a navegação Saltar para a pesquisa


Quando um endereço IP faz uma edição, um banco de dados é consultado. Este banco de dados contém uma lista com mais de 200.000 endereços de proxies abertos. Se o endereço consta na lista, o fato é reportado nesta página.

Este sistema automático só funciona se o servidor de RonaldB (ligação para nl:wikipedia) está online, o que acontece quase sempre, embora possa haver algumas quedas.

O sistema é alimentado por irc-stream de mudanças recentes. Se o sistema está operacional, está logado com o name op-nnnnn, onde nnnnn é um número de 5 algarismos.

Para maiores informações, veja w:nl:Gebruiker:RonaldB/Open proxy fighting.

Explanation of information provided[editar]

type
This provides further info on the type of open proxy. If this is preceded by probably, it means that the IP-address has ever been published as open proxy, but the scanning module has not been able to confirm this to be the case.
Following types are discerned:
  • open proxy - a "normal" open proxy. The system does not provide the sub type (e.g. transparent, anonymous, etc.).
  • TOR exit node - an IP-address of the TOR network, by which servers on the internet can be accessed (which is not the same as a TOR onion node).
  • exit server - some open proxies use another IP-address (possibly a zombie) to access servers on the internet.
  • anonymizer - an anonymizing service, generally using a web interface (also called CGI or PHP proxy). The IP-address, by which that service is accessing the internet to request pages, is reported. This is not necessarily the same as the IP-address hosting the service.
  • web server - The IP-address, or the range it belongs to, is solely used for web hosting. It may be hacked or is hosting a CGI/PHP proxy.
  • JAP - also called JonDo, a rarely used and relatively small anonymizing network.
  • SSH - the IP-address supports the Secure Shell protocol. If an attacker knows the log-in data, he may use the IP-address as a proxy, which propably occurs in 15-20% of the reported cases.
  • SOCKS proxy - são proxys que acessam a rede por meio de firewall.
If the type designation is followed by an asterisk, this means that the IP-address is known in the database with multiple types. The type is shown with the most recent confirmed date.
in db since
The date the IP-address was first contained in the database.
first confirmed
The first date the scanner confirmed this IP-address to be an open proxy.
last confirmed
The most recent date the scanner confirmed this IP-address to be an open proxy. If the indication is Now !, this means that the open proxy behaviour has been confirmed by an "on-the-fly" check at the moment of editing. This can only be accomplished for "normal" open proxies.

The date information is used for the background-colouring of the entry. The darker, the more likely the IP-address is indeed an open proxy at the moment of editing.