Skip to content
VPNDetection

Carrier-assigned addresses sold as proxies.

Mobile network addresses enrolled into proxy networks. They inherit a carrier's reputation and rotate with the tower.

Published as CSVGZ and MMDB. Every column is described in the docs.

ipproviderfirst_seenlast_seenhitshits_days_pctproviders_num
142.169.77.36floppydata2026-06-172026-08-23532
185.117.151.243dataimpulse2026-06-182026-08-06762
84.15.181.69dataimpulse2026-08-142026-08-14111
2600:1008:a034:f0d1:fab9:135b:3ef9:293floppydata2026-06-102026-06-10111
2a00:23ee:2300:136a:4cd1:51ff:fee0:b836floppydata2026-07-302026-07-30111
ID
mobproxy_ip_90d_v1
Entries
3,551,595
Refresh
Daily
CSVGZ
34.74 MB
MMDB
474 MB
Mobile Proxy Provider

The operators behind the ids.

Mobile Proxy Provider documentation →

provider is an id that holds from build to build. Mobile Proxy Provider resolves each one to the provider's name and homepage, whether we track its addresses and whether it has gone defunct. Join it on provider.

idnameurlactivenotedefunct
dataimpulseDataImpulsehttps://dataimpulse.com/tf
floppydataFloppydatahttps://floppydata.com/tf
vibeproxiesVibeProxieshttps://vibeproxies.com/tf
ID
mobproxy_provider_v2
Entries
3

Downloading it from code.

Database API reference →

One call gets you the current Mobile Proxy IP build. Every official client wraps it three ways: straight to disk, a time-limited link you hand to your own runner, or bytes in memory. A file written to disk lands only once the whole transfer has arrived, and checksums() returns the published digests to verify it against.

download()
Streams the current build to a file, which lands only once the whole transfer has arrived, so a failed one never leaves a truncated file behind.
downloadUrl()
The time-limited link the API redirects to, for your own downloader, a job runner or a CDN pull.
downloadBytes()
The build in memory, for a small dataset or a pipeline that never touches a filesystem.
metadata()
Row count, file sizes and when the build last updated. Poll it and fetch only when a new one has landed.
checksums()
The md5, sha1, sha256 and sha512 digests of one file, to verify it once it lands.
import os
from vpndetection import VPNDetection
client = VPNDetection(os.environ["VPNDETECTION_API_KEY"])
# to disk, streamed
client.database.download("mobproxy_ip_90d_v1", "csvgz", "mobproxy_ip_90d_v1.csv.gz")
# a time-limited link
url = client.database.download_url("mobproxy_ip_90d_v1", "csvgz")
# in memory
raw = client.database.download_bytes("mobproxy_ip_90d_v1", "csvgz")
download.pypip install vpndetection
Also available for .NET, Ruby, Rust, Swift, Erlang, Perl and Zig. See all on GitHub →

What it's used for

Three decisions Mobile Proxy IP is bought for, and what each needs from the data rather than from a score.

Carrier NAT hides a lot

One mobile address can front thousands of real customers, so blocking it outright is expensive. Knowing it is also a proxy exit changes the calculus.

The premium tier of abuse

Mobile proxies cost the most and are used where the target is most valuable: account takeover, ticketing, sneaker drops.

Rotation is fast

Addresses move between customers within hours, which is why first seen and last seen matter more here than anywhere else.

License the full database
Sales will quote on volume, term and whether you need redistribution rights.
Checksums published per file: md5, sha1, sha256 and sha512.
The id pins the schema version, so a new build never changes the columns your parser reads.
Samples are cut from the current build, not a synthetic extract.

Twelve official clients, each wrapping the database endpoints as well as the lookup: list what you're licensed for, poll a build, follow the download redirect. Install commands are in the docs.

On this page

What does a row tell us?

One address seen exiting a mobile proxy pool in the window, the provider that sold it, the first and last day it appeared, how many times, the share of days it appeared on, and how many providers resold it.

00 · No key

Start without signing up.

Paste it into a terminal. No account needed. 1,000 lookups a day per address, answering ip and is_vpn.

curl "https://api.vpndetection.io/146.70.116.130"
{
"ip": "146.70.116.130",
"is_vpn": true
}
01 · Free key

Sign up and get 50,000 requests a month.

No card and no sales call: the key is issued on signup.
Every request flags VPN IPs.
Upgrade only when you outgrow the allowance.