Public Proxy IP 30d

Overview

A public proxy is one anyone can connect through: an HTTP proxy, an HTTP proxy that also tunnels HTTPS connections, or a SOCKS4 or SOCKS5 proxy. Each row is one address seen at either end of a public proxy in the last 30 days: exit if a proxy's traffic left from it, entry if a proxy listens on it, or both.

A request through a proxy arrives from the address its traffic leaves from, which is often not the one the proxy listens on, and one proxy can leave from several addresses over time. Each of them is an exit row of its own, so the file is a blocklist as it is.

Useful for spotting a signup, login or checkout that arrives through a proxy anyone can use rather than from the person's own connection.

protocols are those of the proxies at either end. num_ports counts the ports a proxy listens on at the address and num_proxies the proxies whose traffic left from it, so each is 0 on a row that is only the other end. last_usable is the last day a request through a proxy at the address was answered, empty when none was, and last_seen the last day the address was seen at all. An entry with num_ports 0 and no protocols ran a public proxy whose port isn't known.

The MMDB holds the same rows, a record per address.

Public Proxy IP comes in six windows, 1, 7, 14, 30, 60 and 90 days. A shorter one leaves out the addresses not seen lately.

Formats

curl -L -o pubproxy_ip_30d_v1.csv.gz -X GET "https://internetdata.io/api/v2/database/download?id=pubproxy_ip_30d_v1&format=csvgz&apikey=$APIKEY"

curl -L -o pubproxy_ip_30d_v1.mmdb -X GET "https://internetdata.io/api/v2/database/download?id=pubproxy_ip_30d_v1&format=mmdb&apikey=$APIKEY"