Limits and restrictions
Blocked ports, restricted targets, session limits, and how to unlock restrictions with account verification.
These rules apply to every network. Most restrictions exist to protect the network and its carriers and can be lifted for verified accounts.
Blocked ports
The following destination ports are blocked by default on all proxies:
19, 22, 25, 110, 123, 143, 389, 465, 587, 993, 995,
1900, 2087, 3222, 3389, 5555, 5858, 6000–6010, 11211, 63002
⟧ That covers mail (25, 110, 143, 465, 587, 993, 995), SSH (22), RDP (3389), LDAP (389), NTP (123), SSDP (1900), memcached (11211) and a few others commonly involved in abuse. Port 25 in particular is never open by default.
Restricted targets
Requests to the following are blocked by default on all proxies:
- Government domains:
.govand national equivalents - Banking and financial institution websites
- Other domains on Datafuel’s restricted list
On the rotating gateways a request to a restricted target is refused with 423 and is not charged. On ISP and datacenter proxies the connection is closed with no response, by design; see How errors look.
Unlocking restrictions
Blocked ports and restricted targets can be unlocked for accounts that complete verification. Open a request from the dashboard or write to support@datafuel.ai with the ports or domains you need and the use case. Verification is handled through Sumsub or Stripe Identity; the policy is described in KYC & verification. Unlocks are granted per account and can be withdrawn under the Fair Usage Policy.
Sessions
- Sticky sessions hold an IP for up to 1440 minutes (24 hours), set with
ttl. - A session ends early if the IP goes offline; the next request with the same id gets a new IP.
- There is no limit on the number of concurrent sessions on residential and mobile plans.
Targeting
cityandasncannot be combined in one request.- ZIP targeting is not available yet.
- Narrow targets can be empty in small countries; widen the request if no IP is returned.
Usage and fair use
Residential and mobile traffic is measured in bytes transferred through the gateway in both directions. Traffic never expires. ISP and datacenter proxies have no traffic cap; sustained very high throughput is rate-limited and support contacts you first, and guaranteed throughput from 300 Mbit/s to 100 Gbit/s is a custom plan. Using the network in breach of the Fair Usage Policy leads to suspension; abuse reports are handled through abuses@datafuel.ai.