GeoIP® Anonymous Plus database
Not all proxy traffic carries the same risk
Anonymous IP addresses, including those from proxies and VPNs, mask a user's real IP, making it difficult to determine their true location. Some users rely on them for privacy and security, while others exploit them to bypass restrictions, commit fraud, or evade detection.
With accurate IP intelligence, you can detect and classify anonymous IPs to reduce risk without blocking legitimate users.
Introducing the GeoIP Anonymous Plus database
The GeoIP Anonymous Plus database empowers businesses to make more nuanced decisions on how to handle proxy traffic in security, compliance, and fraud prevention use cases. It identifies the name of the proxy provider and provides a confidence score on how likely a network is to be in current use by a proxy provider.
Connect with us todayIdentify and manage proxy risks with confidence
Not all proxy providers operate the same way. Some present a higher risk because they do not collect identifying user data or keep logs, making it difficult to trace activity in response to legal action. Others may simply have a reputation among bad actors regardless of their internal practices. And some may even be implicated in an attack on your business, despite typically handling safer traffic. Understanding these differences helps businesses make fast, responsive, informed security decisions.
Reduce false positive potential with proxy confidence scores
Proxy networks can share infrastructure with legitimate businesses, which can lead to misclassifications. Proxy confidence scores provide insight into how likely an IP is actively being used for anonymous activity.
High confidence:
The IP is frequently associated with known proxy providers, making it more likely to be used for anonymous traffic.
Low confidence:
The IP has been marked as anonymous but has not been recently seen in proxy usage, reducing the likelihood of malicious activity.
With this data, businesses can fine-tune their approach by blocking high-risk traffic while minimizing false positives and avoiding unnecessary friction for legitimate users.
Technical details
Data insights on anonymized networks
Anonymizing VPN services
These are IP addresses registered to known services that offer users a tunnel to a VPN server, which serves to hide the true IP address.
Residential proxies
These are IP addresses on a suspected anonymizing network that are registered under residential ISPs (does not include peer-to-peer proxy IPs).
Hosting providers/data centers
These are IP addresses associated with hosting services that are likely to be used as anonymizers. This anonymizer type also includes both registered and non-registered anonymizing VPN services.
Tor exit nodes
These are IP addresses from which Tor users will access the internet. The Tor Project is an open network used by those who wish to maintain anonymity.
Public proxies
These are proxies that are available for free and publicly posted.
Provider name
The name of the VPN provider associated with the network.
Anonymizer confidence
A score from 1 to 99 indicating the likelihood that the network is currently part of an actively used VPN service. At launch, only values of 30 and 99 will be provided, with more granular ratings introduced over time.
Network last seen
The last day the network was detected in our analysis of VPN networks.