VPNDetectionVPNDetection
Public Proxy IPPublic Proxy IP 14d

Public Proxy IP 14d

Public proxies seen within the last 14 days, each with its port, protocol, country, latency and exit IP.

Explore API
IDpubproxy_ip_14d_v1
Formatscsvgz, mmdb
Update FrequencyDaily
Last UpdatedOctober 18th 2026 (today)
Entries28,279
File Size (csvgz)173 KB
File Size (mmdb)677 KB

Overview

A public proxy is one anyone can connect through: an HTTP proxy, an HTTP proxy that also tunnels HTTPS connections, or a SOCKS4 or SOCKS5 proxy. Each row is one proxy seen in the last 14 days: the address it listens on, its port and protocol, and the address's country.

last_usable is the last day a request through the proxy was answered, avg_ms how long those answers took on average, and exit_ip the address its traffic last left from, which is often not the address it listens on. All three are empty for a proxy that didn't answer in the window. last_seen is the last day the proxy was seen at all.

Useful for spotting a signup, login or checkout that arrives through a proxy anyone can use rather than from the person's own connection.

A row with no port or protocol is an address that ran a public proxy whose port isn't known. It's dropped once a row of the same address has a port.

The MMDB has one record per address, covering both ends of a proxy: entry is true where a proxy listens and exit where a proxy's traffic leaves from, beside the protocols, last_seen and last_usable. A lookup of the address a request came from finds either end.

Public Proxy IP comes in six windows, 1, 7, 14, 30, 60 and 90 days. A shorter one leaves out the proxies not seen lately.

Formats

curl -L -o pubproxy_ip_14d_v1.csv.gz -X GET "https://api.vpndetection.io/api/v1/database/download?id=pubproxy_ip_14d_v1&format=csvgz&apikey=$APIKEY"
Schema
NameTypeDescription
ipipaddressIP address a public proxy listens on, seen within the last 14 days.
portintegerPort the proxy listens on; empty when only the address is known.
protocolstringProtocol the proxy speaks; empty when only the address is known. Values are listed below.
http
An HTTP proxy that forwards plain HTTP requests.
https
An HTTP proxy that also tunnels HTTPS connections (CONNECT).
socks4
A SOCKS4 proxy.
socks5
A SOCKS5 proxy.
countrystringISO 3166-1 alpha-2 country code of the IP address.
avg_msintegerAverage time, in milliseconds, a request through the proxy took to be answered within the last 14 days; empty when none was answered.
last_usabledateLast time within the last 14 days a request through the proxy was answered; empty when none was.
last_seendateLast time within the last 14 days this proxy was observed.
exit_ipipaddressIP address the proxy's traffic last left from within the last 14 days; empty when none was answered.
Samples
ipportprotocolcountryavg_mslast_usablelast_seenexit_ip
108.61.185.1881080socks5AUN/AN/A2026-10-17N/A
189.124.85.7733333httpBRN/AN/A2026-10-17N/A
192.252.220.894145socks4USN/AN/A2026-10-17N/A
103.54.171.468080httpIDN/AN/A2026-10-17N/A
45.74.31.4213572socks5AUN/AN/A2026-10-17N/A
curl -L -o pubproxy_ip_14d_v1.mmdb -X GET "https://api.vpndetection.io/api/v1/database/download?id=pubproxy_ip_14d_v1&format=mmdb&apikey=$APIKEY"
Schema
NameTypeDescription
entrybooleanWhether a public proxy listens on this address ("true" or "false").
exitbooleanWhether a public proxy's traffic leaves from this address ("true" or "false").
protocolsstringComma-joined protocols of the proxies listening on or leaving from this address; empty when only the address is known.
last_seendateLast time within the last 14 days a proxy on this address was observed.
last_usabledateLast time within the last 14 days a request through a proxy on this address was answered; empty when none was.
Samples
last_seenlast_usable
2026-10-17N/A
2026-10-17N/A
2026-10-17N/A
2026-10-17N/A
2026-10-17N/A

On this page