---
title: "IP Security Database | Threat Intelligence & Proxy Detection"
slug: "/ip-security-database.html"
parent: "IP Geolocation Databases"
description: "Detect VPNs, proxies, TOR nodes, proxy providers, cloud hosts, bots, threat scores & attackers. Make smarter security decisions with our IP Security Database."
---

# IP Security Database

## & Threat Intelligence

Protect your digital assets with our IP Security Database. Instantly detect VPN IPs, high-risk proxies, and Tor nodes. Block known attackers and bots. Gain up-to-date insights into threat scores and anonymous connections. Create a secure online environment for your business and customers.

[Request a Quote](https://ipgeolocation.io/ip-security-database.html#contact-us-for-quote)

| Start ip | End ip | Threat score | Is tor | Is proxy | Proxy provider names | Proxy confidence score | Proxy last seen | Is residential proxy | Is vpn | Vpn provider names | Vpn confidence score | Vpn last seen | Is relay | Relay provider name | Is anonymous | Is known attacker | Is bot | Is spam | Is cloud provider | Cloud provider name |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 1.1.176.245 | 1.1.176.245 | 45  | false | true | [ProxyScrape] | 90  | 2026-06-11 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.2.244.16 | 1.2.244.16 | 45  | false | true | [NetNut] | 99  | 2026-06-17 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.4.184.73 | 1.4.184.73 | 45  | false | true | [NetNut] | 80  | 2026-05-19 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.10.185.41 | 1.10.185.41 | 45  | false | true | [ProxyScrape] | 90  | 2026-06-11 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.20.98.17 | 1.20.98.17 | 45  | false | true | [NetNut] | 99  | 2026-06-19 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.20.100.30 | 1.20.100.30 | 30  | false | false | []  | 0   |     | false | false | []  | 0   |     | false |     | false | true | false | false | false |     |
| 1.20.140.4 | 1.20.140.4 | 45  | false | true | [NetNut] | 99  | 2026-06-15 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.20.149.109 | 1.20.149.109 | 45  | false | true | [NetNut] | 90  | 2026-05-27 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.20.151.74 | 1.20.151.74 | 45  | false | true | [NetNut] | 80  | 2026-05-19 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 1.20.169.239 | 1.20.169.239 | 75  | false | false | []  | 0   |     | false | true | []  | 70  |     | false |     | true | true | false | false | false |     |

## Use Cases

![Restriction](https://static.ipgeolocation.io/web-assets/images/digital_rights_protection.svg)

#### Restrict Unauthorized Access

Prevent users using VPNs from accessing sensitive platforms by running accurate VPN checks to allow only verified users with real IP addresses.

![Secure Web](https://static.ipgeolocation.io/web-assets/images/database/secure-web.svg)

#### Secure Your Website

Protect your online services by using a proxy checker to block unwanted proxy servers, ensuring that only legitimate traffic can access them.

![Spam Attacks](https://static.ipgeolocation.io/web-assets/images/products/e-commerce-fraud-prevention.svg)

#### Prevent Spam and Bot Attacks

Detect and block anonymous proxies and bots to reduce spam submissions and fake account creations on your website.

![Abuse](https://static.ipgeolocation.io/web-assets/images/products/real-time-chat-community-filtering.svg)

#### Mitigate Anonymity Abuse

Enhance threat prevention by using a comprehensive proxy list to block VPNs and proxies used for malicious, masked access or to bypass geo-restrictions.

![Threat Detection](https://static.ipgeolocation.io/web-assets/images/products/fraud-detect.svg)

#### Proactive Threat Detection

Evaluate the general risk level of incoming connections using a calculated score to identify and manage potentially harmful traffic before it impacts systems.

![Filtered Blocking](https://static.ipgeolocation.io/web-assets/images/products/location-based-restriction.svg)

#### Secure Streaming

Improve security by blocking VPNs, proxies, spammers, and attackers from accessing streaming services, thereby preventing abuse, ensuring service availability, and protecting content rights.

![Secure Traffic](https://static.ipgeolocation.io/web-assets/images/products/login-protection.svg)

#### Block Traffic from Known VPN and Proxy Providers

Identify traffic from specific VPN providers or web proxies and deny access to maintain platform integrity and compliance.

![Traffic](https://static.ipgeolocation.io/web-assets/images/database/visitors.svg)

#### Filtering Automated Traffic

Distinguish between human and automated interactions to refine site analytics, prevent bot-driven abuse, and optimize resource allocation.

![Anonymous](https://static.ipgeolocation.io/web-assets/images/database/anonymous.svg)

#### Understanding User Anonymity

Identify traffic originating from anonymization tools to achieve anonymity levels and hide original country, understand user privacy preferences, and detect potential attempts to hide their true origin.

![Email Box](https://static.ipgeolocation.io/web-assets/images/database/emails.svg)

#### Enhancing Email Security

Identify and block connections associated with spam activities to improve email deliverability and reduce the volume of unwanted messages.

### IP to Security Database

Easily spot VPNs and proxies to stop fraud, protect your network, and keep your business safe from online threats.

*   **Fields**
    
    13
    
*   **Entries**
    
    24.6M
    
*   **Last Updated**
    
    Yesterday
    
*   **CSV Size**
    
    218.19 MB
    
*   **MMDB Filesize**
    
    2.98 GB
    

[Get Started now](https://ipgeolocation.io/ip-security-database.html#contact-us-for-quote) [Documentation](https://ipgeolocation.io/documentation/ip-security-database.html)

| Field | Description | Example |
| --- | --- | --- |
| start_ip | The starting IP address of the range in IPv4 or IPv6 format. | 192.168.0.1 |
| end_ip | The ending IP address of the range in IPv4 or IPv6 format. | 192.168.0.255 |
| threat_score | The threat_score is a numerical value indicating the potential risk associated with the IP range, where a higher score suggests a greater risk. | 80  |
| is_tor | Indicates whether the IP range is associated with the Tor network. A value of true means the IP range is linked to a Tor exit node. | false |
| is_proxy | Indicates whether the IP range is associated with proxy activity. A value of true means the IP range is identified as a proxy. | true |
| proxy_provider_names | The name or names of proxy providers associated with the IP range, when available. | [Bright Data, Evomi Proxy] |
| proxy_confidence_score | A numerical confidence score indicating how strongly the IP range is associated with proxy activity. A higher score means stronger confidence. | 95  |
| proxy_last_seen | The most recent date or timestamp when proxy activity was observed for the IP range. | 2026-03-15 |
| is_residential_proxy | Indicates whether the IP range is associated with residential proxy activity. A value of true means the IP range is identified as a residential proxy. | false |
| is_vpn | Indicates whether the IP range is associated with VPN activity. A value of true means the IP range is identified as a VPN. | true |
| vpn_provider_names | The name or names of VPN providers associated with the IP range, when available. | [Nord VPN, Proton VPN] |
| vpn_confidence_score | A numerical confidence score indicating how strongly the IP range is associated with VPN activity. A higher score means stronger confidence. | 90  |
| vpn_last_seen | The most recent date or timestamp when VPN activity was observed for the IP range. | 2026-03-12 |
| is_relay | Indicates whether the IP range is associated with relay network activity. A value of true means the IP range is identified as a relay service. | false |
| relay_provider_name | The name of the relay provider associated with the IP range, when available. | iCloud Private Relay |
| is_anonymous | Indicates whether the IP range is associated with anonymous browsing activity. A value of true means the IP range may be used to hide or mask a user's real network identity. | true |
| is_known_attacker | Indicates whether the IP range has been flagged as associated with known attackers or malicious activity. | true |
| is_bot | Indicates whether the IP range is associated with bot traffic. A value of true means the IP range is likely linked to automated traffic. | false |
| is_spam | Indicates whether the IP range has been flagged for spam activity. A value of true means the IP range is associated with spam behavior. | false |
| is_cloud_provider | Indicates whether the IP range belongs to a cloud, hosting, or infrastructure provider. A value of true means the IP range is associated with cloud or hosting infrastructure. | true |
| cloud_provider_name | The name of the cloud, hosting, or infrastructure provider associated with the IP range, when available. | Amazon Web Services |

### Ways to buy this Data

These purchase options apply across all tiers (Geo Standard, Geo Advanced, Security Pro). Buy an individual database, a curated bundle, or a custom build.

#### Get (Individual)

Purchase this exact database from this tier. Start instantly. Available in multiple formats.

[Buy This Database](https://ipgeolocation.io/security-pro-databases.html)

*   Guided onboarding
*   Instant start
*   Predefined schema & fields
*   Use-case fit
*   Multiple formats
*   Updates & alerts

#### Buy as a ready‑made bundle

Curated packages that include and related datasets, joined on shared keys for common use cases.

[View Bundles With This Database](https://ipgeolocation.io/ip-security-database.html#bundles)

*   Guided onboarding
*   Use-case mapped
*   Joined schema
*   Consistent keys & IDs
*   Multiple formats
*   Updates & alerts

#### Build Your Own (À La Carte)

Combine fields from with any other databases, even across tiers. Choose schema, transforms, cadence, delivery, and format.

[Talk to Sales for Details](https://ipgeolocation.io/ip-security-database.html#contact-us-for-quote)

*   Guided onboarding
*   Mix databases & fields
*   Custom schema
*   Tailored cadence & SLAs
*   Custom formats
*   Updates & alerts

### Comprehensive IP Security Database Bundles

Access ready-made bundles that combine the IP Security Database with our other data feeds—delivering full coverage, effortless integration, and greater value in one package.

#### IP to Security + Location (Standard)

| Start ip | End ip | Country | State | State code | District | City | Zip code | Latitude | Longitude | Geo name id | Time zone name | Threat score | Is tor | Is proxy | Proxy provider names | Proxy confidence score | Proxy last seen | Is residential proxy | Is vpn | Vpn provider names | Vpn confidence score | Vpn last seen | Is relay | Relay provider name | Is anonymous | Is known attacker | Is bot | Is spam | Is cloud provider | Cloud provider name |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 65.55.22.24 | 65.55.22.31 | US  | Washington | US-WA | Grant County | Quincy | 98848 | 47.2343 | -119.85255 | 5807713 | America/Los_Angeles | 5   | false | false | []  | 0   |     | false | false | []  | 0   |     | false |     | false | false | false | false | true | Microsoft Corporation |
| 168.86.199.68 | 168.86.199.68 | GB  | England | GB-ENG | Cambridgeshire | Comberton | CB23 | 52.18542 | 0.02056 | 2652502 | Europe/London | 45  | false | true | [soax] | 99  | 2026-06-18 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 69.197.123.228 | 69.197.123.228 | US  | Illinois | US-IL | Menard County | Oakford No. 9 | 62673 | 40.10255 | -89.96317 | 4904463 | America/Chicago | 45  | false | true | [Zyte Proxy, Oxy Labs, NetNut] | 99  | 2026-06-19 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 78.24.8.0 | 78.24.8.255 | CZ  | Prague | CZ-PR | Prague | Prague | 110 00 | 50.07913 | 14.43302 | 9947824 | Europe/Prague | 5   | false | false | []  | 0   |     | false | false | []  | 0   |     | false |     | false | false | false | false | true | VSHosting s.r.o. |
| 219.89.33.9 | 219.89.33.9 | NZ  | Wellington | NZ-WGN | Wellington City | Wellington | 6011 | -41.29238 | 174.77875 | 10130262 | Pacific/Auckland | 45  | false | true | [Evomi Proxy] | 80  | 2026-05-10 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 194.99.24.192 | 194.99.24.192 | SE  | Stockholm | SE-AB | Stockholm | Stockholm | 169 03 | 59.36845 | 18.00812 | 8128160 | Europe/Stockholm | 80  | false | false | []  | 0   |     | false | true | []  | 75  |     | false |     | true | true | false | false | true | Limestone Networks, Inc. |
| 101.108.112.27 | 101.108.112.27 | TH  | Bangkok | TH-10 | Phra Nakhon | Bangkok | 10200 | 13.75633 | 100.50177 | 6845006 | Asia/Bangkok | 45  | false | true | [ProxyScrape] | 90  | 2026-05-28 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 104.244.243.42 | 104.244.243.42 | US  | Illinois | US-IL | Cook | Chicago | 60602 | 41.88425 | -87.63245 | 4902090 | America/Chicago | 45  | false | true | [Oxy Labs] | 80  | 2026-05-10 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |
| 2604:ca00:1d8:0:0:0:0:0 | 2604:ca00:1d9:1287:0:0:45f:ffff | US  | California | US-CA | Santa Clara | Mountain View | 94041 | 37.38967 | -122.0816 | 5375494 | America/Los_Angeles | 50  | false | false | []  | 0   |     | false | false | []  | 0   |     | true | Google Fi VPN | true | false | false | false | true | Google, LLC |
| 69.159.239.195 | 69.159.239.195 | CA  | Quebec | CA-QC | Montreal | Montreal | H3B | 45.50189 | -73.56739 | 7288804 | America/Toronto | 45  | false | true | [Evomi Proxy, DataImpulse] | 80  | 2026-05-10 | true | false | []  | 0   |     | false |     | true | false | false | false | false |     |

*   **Fields**
    
    23
    
*   **Entries**
    
    29.3M
    
*   **Last Updated**
    
    Yesterday
    
*   **CSV Size**
    
    551.20 MB
    
*   **MMDB Filesize**
    
    4.33 GB
    

This database bundle is a part of our [Security](https://ipgeolocation.io/security-pro-databases.html) Tier

## Frequently Asked Questions

### What is IP Security Database?

**Answer:** An IP Security Database identifies IP addresses linked to VPNs, proxies, Tor nodes, and other anonymization tools. It evaluates threat scores, flags bots, spammers, attackers, and cloud sources to ensure security and detect anonymized access.

### Do you identify anonymous proxies like Tor?

**Answer:** Yes, our database flags anonymous proxies and Tor exit nodes, helping stop unauthorized or masked access to your services.

### What is the update frequency of your security data?

**Answer:** Our security data is updated daily. This ensures that the information used to identify and assess the risk of IP addresses, including those associated with VPNs, proxies, and malicious activities, is as current and accurate as possible.

### Do you support integration via API?

**Answer:** Yes, our [IP Security API](https://ipgeolocation.io/ip-security-api.html) is fully featured for easy integration. You can run a VPN check, detect proxy types, and obtain JSON response.

### What are proxy types included in your database?

**Answer:** Security database detects various proxy types, including VPNs, proxies, OpenVPN, WireGuard, and relays, using detailed threat intelligence.

### What kind of IP address insights can I expect?

**Answer:** You’ll receive detailed IP intelligence including start and end IP ranges, threat score, VPN and proxy detection, proxy type and provider, Tor node status, anonymization flag, attacker or bot activity, spam association, and cloud provider ownership.

### Is there any free online proxy checker tool available?

**Answer:** Yes, our proxy checker [tool](https://ipgeolocation.io/ip-security-api.html) offers limited free requests to check proxy online and identify their type and risk level. It allows users to quickly verify if an IP address is linked to a proxy, VPN, or Tor node.

### Who should use a proxy detection tool?

**Answer:** Businesses, developers, marketers, and cybersecurity teams should use proxy detection tools to improve security, user analytics, and access control.