This Week's Proxy Exits: 11.9M New Addresses, Almost All Off Datacenter Space

Datacenter blocklists are still the default proxy defence in a lot of fraud stacks. The addresses showing up in proxy supply this week mostly were not in datacenters. Between 6–12 October 2026 (UTC), the IP99 risk feed captured 11,860,625 proxy exit addresses it had not seen in the previous 7 days (+27% vs the prior week).

数据中心黑名单仍然是许多欺诈防御体系中的默认代理防御手段。本周出现在代理供应中的地址大多不在数据中心内。在 2026 年 10 月 6 日至 12 日（UTC）期间，IP99 风险信息源捕获了 11,860,625 个在过去 7 天内未曾见过的代理出口地址（较前一周增长 27%）。

Source page: ip99.com/en/proxy-exits (generated 13 Oct 2026 UTC). What those addresses sit on Usage type Addresses Share Residential broadband 9,427,787 79.5% Mobile network 1,557,255 13.1% Gateway / NAT egress 536,041 4.5% Datacenter 260,684 2.2% Education network 48,206 0.4% Unclassified 30,652 0.3% About 65% were rated high-risk at the moment of capture. The rest still carried a proxy-class signal at a lower risk level.

来源页面：ip99.com/en/proxy-exits（生成于 2026 年 10 月 13 日 UTC）。这些地址的所属类型：使用类型、地址数量、占比。住宅宽带 9,427,787（79.5%），移动网络 1,557,255（13.1%），网关/NAT 出口 536,041（4.5%），数据中心 260,684（2.2%），教育网络 48,206（0.4%），未分类 30,652（0.3%）。约 65% 的地址在捕获时被评为高风险。其余地址仍带有较低风险级别的代理类信号。

IP99 counts an address as “captured” when it enters the feed with a proxy-class signal (proxy, VPN, dial-up pool, cloud phone, or hijacked shared proxy) and was not in the live 7-day risk mirror. Addresses that go quiet and return can be counted again. The page describes what 53 upstream collection sources delivered - not the total number of proxies in the world.

当一个地址带有代理类信号（代理、VPN、拨号池、云手机或被劫持的共享代理）进入信息源，且不在 7 天实时风险镜像中时，IP99 会将其计为“已捕获”。静默后重新出现的地址可能会被再次计算。该页面描述的是 53 个上游收集源提供的数据，而非全球代理的总数。

Why the 2% matters If your defence is mainly an ASN or hosting blocklist, you are mostly looking at that 2.2% datacenter slice. Residential and mobile space is where home-broadband proxies and dial-up pools live. An address that keeps turning up in proxy supply is a proxy exit whatever its ISP label says. Top ASNs in this week’s capture window (by address count) include large access networks such as AS4134 and AS4837. That is a clue about where supply is being sold from, not a claim that every customer on those networks is a proxy.

为什么 2% 很重要：如果你的防御主要依赖 ASN 或托管黑名单，你关注的主要是那 2.2% 的数据中心部分。住宅和移动网络空间才是家庭宽带代理和拨号池的所在地。无论 ISP 标签如何，一个不断出现在代理供应中的地址就是一个代理出口。本周捕获窗口中的顶级 ASN（按地址数量计）包括 AS4134 和 AS4837 等大型接入网络。这只是关于供应来源的线索，并不代表这些网络上的每个客户都是代理。

Day-to-day shape Captured addresses (new to the prior 7-day mirror that day), with how many were high-risk at capture: Day (UTC) Captured High-risk at capture 2026-10-06 1,251,843 785,307 2026-10-07 1,274,864 789,967 2026-10-08 1,890,133 1,202,297 2026-10-09 2,242,137 1,559,247 2026-10-10 1,926,679 1,267,978 2026-10-11 1,752,149 1,112,807 2026-10-12 1,522,820 961,739 The peak on 8–9 Oct is visible in the table; the week still closes well above the prior window.

每日形态：已捕获地址（当日相对于前 7 天镜像新增的地址）及捕获时的高风险数量：日期（UTC）、已捕获、捕获时高风险。2026-10-06：1,251,843 / 785,307；2026-10-07：1,274,864 / 789,967；2026-10-08：1,890,133 / 1,202,297；2026-10-09：2,242,137 / 1,559,247；2026-10-10：1,926,679 / 1,267,978；2026-10-11：1,752,149 / 1,112,807；2026-10-12：1,522,820 / 961,739。表中可见 10 月 8 日至 9 日的峰值；本周结束时的数值仍远高于前一窗口期。

Check one yourself Free, no signup: curl https://ip99.com/v1/ip/8.8.8.8 Look at evidence_state (active / stale / none), risk.score, and the proxy-class signals. A score of 0 is not “safe” - it means IP99 holds no current verifiable evidence against that address. IP99 is built by ThreatHunter. Weekly capture totals refresh daily on ip99.com/en/proxy-exits.

自行检查：免费，无需注册：curl https://ip99.com/v1/ip/8.8.8.8。查看 evidence_state（活跃/陈旧/无）、risk.score 和代理类信号。分数为 0 并不代表“安全”，这意味着 IP99 目前没有针对该地址的可验证证据。IP99 由 ThreatHunter 构建。每周捕获总量会在 ip99.com/en/proxy-exits 上每日刷新。