Rotating residential proxies
A fresh residential IP on every request, or one held for 30 minutes
From $2.65/GB
Loading page content.
Loading page content.
Free tool
Test any HTTP, HTTPS or SOCKS5 proxy endpoint: reachability, connect latency, whether your credentials were accepted, and the exit address a destination server actually sees.
What it measures
A single pass/fail hides the distinction that actually tells you what to fix. Each stage is timed and reported on its own.
Whether a TCP connection completes at all. A refusal and a timeout mean different things: refused is a closed port, timed out is usually an IP allow-list that does not include us.
Round-trip time to complete the TCP handshake from our network. Use it to compare endpoints against each other, not as the latency your own workers will see.
Whether the endpoint accepted the credentials, refused them, or did not ask for any. An endpoint that serves an unauthenticated session is worth knowing about before you deploy it.
Read by making a request through the tunnel the proxy opened, over verified TLS, to our own lookup endpoint. This is what a destination sees, not what the proxy claims about itself.
What this tool refuses to do
Reading the result
Proxy problems repeat. These five account for most of the tickets we see, and four of them are configuration rather than a broken endpoint.
| Symptom | What it means | Where to look |
|---|---|---|
| Connection refused | Nothing is listening on that port, or a firewall rejected it. | Confirm the port from your provider's dashboard. Gateway endpoints and per-IP endpoints usually differ, and a rotating gateway often uses a different port from a sticky one. |
| Connection timed out | Packets are being dropped rather than refused. | Typically IP whitelisting: the endpoint is only answering addresses on the allow-list, and ours is not on it. Test with credentials instead of a whitelist, or add the address you actually run from. |
| Credentials rejected | The endpoint answered and refused the username or password. | Check for a targeting suffix in the username. Country, city, ASN and session parameters are usually encoded there, and a malformed suffix reads as a bad password rather than as a bad parameter. |
| Answered, but not with the expected protocol | A SOCKS5 greeting was sent to an HTTP proxy, or the reverse. | Switch the protocol selector. Many endpoints serve both on separate ports, and a few serve HTTP and SOCKS5 on the same one. |
| Tunnel opened, no exit address | The handshake succeeded but the probe through the tunnel did not answer. | The proxy can accept connections but cannot reach the destination, or it is filtering the destination. A pool with exhausted bandwidth commonly behaves this way. |
From your own machine
Latency measured from our network is a comparison, not a prediction. Run these from wherever your workers actually run and the numbers become yours.
Note the socks5h scheme in the third command. With plain socks5, curl resolves the hostname locally and sends the resulting address to the proxy, which leaks your DNS and defeats country targeting on anything geo-sensitive. The h makes the proxy do the resolving. It is the single most common mistake in a SOCKS5 setup.
# The same three checks, from your own machine
# 1. Is the port open at all?
nc -vz gate.example.com 8080
# 2. Does the proxy accept your credentials and relay?
curl -sS -o /dev/null -w '%{http_code} %{time_total}s\n' \
-x http://USERNAME:[email protected]:8080 \
https://fleetproxy.com/api/tools/ip-lookup
# 3. What exit address does the destination see?
curl -sS -x socks5h://USERNAME:[email protected]:1080 \
https://fleetproxy.com/api/tools/ip-lookup | jq -r .result.ipTest ours
Every plan issues a credential the moment it is provisioned, and the free trial issues one without a card. Prices are the entry rate resolved from the same tiers checkout uses.
A fresh residential IP on every request, or one held for 30 minutes
From $2.65/GB
Dedicated ISP addresses that stay yours, with unmetered bandwidth
From $3.50/IP/wk
A dedicated 4G/5G modem port behind carrier-grade NAT
From $1.60/IP/day
Dedicated IPv4 on Tier-1 backbones, 10 Gbps and unmetered
From $2.00/IP/wk
How to use it
Type the proxy host and port, and pick HTTP, HTTPS or SOCKS5. Use the host on its own — no scheme, no path.
Username and password are optional. Leave them empty to see whether the endpoint accepts an unauthenticated session, which is worth knowing.
The tester opens a TCP connection, completes the protocol handshake, and opens a tunnel to our lookup endpoint through the proxy.
Each stage is reported separately with its own timing, so a refused credential, an unreachable port and a tunnel that cannot reach the internet are distinguishable rather than one red cross.
Questions
Related: IP address lookup for what an exit address discloses, and the IP blacklist check for the blocklist queries to run against it.
Create an account, claim 50MB of free residential bandwidth, and run this tester against the endpoint we issue. No card, and the trial credential works with every targeting parameter the paid plans use.
No card required for the trial. Cancel or downgrade at any time.