--- title: "VPN & Residential Proxy Detection | Security Pro" slug: "/security-pro-databases.html" parent: "IP Geolocation Database Tiers" description: "Instantly detect proxy, VPN, or Tor with our Security Pro Database. Protect your system from cyber threats by evaluating the risk associated with IPs." --- # Security Pro ### Databases Reveal hidden threats with our Security Pro Database. Instantly detect proxies, VPNs, anonymous traffic, and residential proxy usage. Boost fraud prevention, enhance security, and protect your infrastructure and sensitive data with accurate, up-to-date IP risk and reputation insights. [Explore Databases](https://ipgeolocation.io/security-pro-databases.html#database-collection) [Get Started now](https://ipgeolocation.io/security-pro-databases.html#contact-us-for-quote) ## Use Cases ![Fraud Prevention](https://static.ipgeolocation.io/web-assets/images/database/use-cases/malicious-threat-detection.svg) #### Fraud Prevention Identify risky IPs using threat scores, proxy detection, and anonymity flags to block fraud attempts before they reach your systems. ![Ad Verification](https://static.ipgeolocation.io/web-assets/images/database/use-cases/marketing.svg) #### Ad Verification Detect residential and data center proxies to prevent ad fraud and ensure your ads are seen by real users in valid locations. ![Account Protection](https://static.ipgeolocation.io/web-assets/images/database/use-cases/compliance.svg) #### Account Protection Stop credential stuffing, fake sign-ups, and suspicious logins by detecting VPNs and filtering traffic from high-risk and anonymous IP addresses. ![Content Protection](https://static.ipgeolocation.io/web-assets/images/database/use-cases/personalized-content.svg) #### Content Protection Block unauthorized scraping or access to premium content by identifying masked IPs from bots, proxies, and automation tools. ![Payment Security](https://static.ipgeolocation.io/web-assets/images/database/use-cases/enhancing-email-secutiry.svg) #### Payment Security Protect checkout and transaction pages by analyzing IP risk levels and stopping payments from known malicious or anonymized sources. ![API Abuse Mitigation](https://static.ipgeolocation.io/web-assets/images/database/use-cases/fraud-prevention.svg) #### API Abuse Mitigation Prevent misuse of APIs by detecting suspicious IP behavior, including high-frequency access or masked identities via proxies and VPNs. ![Spam Prevention](https://static.ipgeolocation.io/web-assets/images/database/use-cases/abuse-spam-reporting.svg) #### Spam Prevention Reduce form spam, fake reviews, and comment abuse by blocking IPs flagged for spam or known to use anonymity networks. ## Databases ### IP Security The Security Threat Database helps identify high-risk IPs associated with anonymity, proxy use, and malicious activity to strengthen protection across your digital infrastructure. [Documentation](https://ipgeolocation.io/documentation/ip-security-database.html) | Start ip | End ip | Threat score | Is tor | Is proxy | Proxy provider names | Proxy confidence score | Proxy last seen | Is residential proxy | Is vpn | Vpn provider names | Vpn confidence score | Vpn last seen | Is relay | Relay provider name | Is anonymous | Is known attacker | Is bot | Is spam | Is cloud provider | Cloud provider name | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | 1.1.176.245 | 1.1.176.245 | 45 | false | true | [ProxyScrape] | 90 | 2026-06-11 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 1.2.244.16 | 1.2.244.16 | 45 | false | true | [NetNut] | 99 | 2026-06-17 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 1.4.184.73 | 1.4.184.73 | 45 | false | true | [NetNut] | 80 | 2026-05-19 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 1.10.185.41 | 1.10.185.41 | 45 | false | true | [ProxyScrape] | 90 | 2026-06-11 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 1.20.98.17 | 1.20.98.17 | 45 | false | true | [NetNut] | 99 | 2026-06-19 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 1.20.100.30 | 1.20.100.30 | 30 | false | false | [] | 0 | | false | false | [] | 0 | | false | | false | true | false | false | false | | | 1.20.140.4 | 1.20.140.4 | 45 | false | true | [NetNut] | 99 | 2026-06-15 | true | false | [] | 0 | | false | | true | false | false | false | false | | * **Fields** 13 * **Entries** 24.6M * **Last Updated** Yesterday * **CSV Size** 218.19 MB * **MMDB Filesize** 2.98 GB ### Residential Proxies The Residential Proxy Database provides masked IPs taken from residential networks, often used for automation. It enables safer engagement with real users. [Documentation](https://ipgeolocation.io/residential-proxy-database.html) | Start ip | End ip | Proxy provider | Last seen | | --- | --- | --- | --- | | 1.1.161.255 | 1.1.161.255 | NetNut | 2026-06-04 | | 1.2.184.180 | 1.2.184.180 | NetNut | 2026-06-06 | | 1.32.27.91 | 1.32.27.91 | Evomi Proxy | 2026-06-01 | | 1.39.177.94 | 1.39.177.94 | NetNut | 2026-06-16 | | 1.40.159.70 | 1.40.159.70 | Evomi Proxy | 2026-04-15 | | 1.46.149.134 | 1.46.149.134 | NetNut | 2026-05-29 | | 1.47.153.173 | 1.47.153.173 | anyIP | 2026-06-20 | * **Fields** 4 * **Entries** 16.0M * **Last Updated** Yesterday * **CSV Size** 177.84 MB * **MMDB Filesize** 2.90 GB ### IP to Hosting Identify the hosting provider of any cloud IP address with our reliable database. Secure your website from bots, scrapers, and fraud. [Documentation](https://ipgeolocation.io/documentation/ip-hosting-database.html) | Start ip | End ip | Hosting provider | | --- | --- | --- | | 1.12.220.207 | 1.12.220.207 | Shenzhen Tencent Computer Systems Company Limited | | 1.13.150.0 | 1.13.150.255 | Shenzhen Tencent Computer Systems Company Limited | | 1.116.221.17 | 1.116.223.201 | Shenzhen Tencent Computer Systems Company Limited | | 2.56.178.187 | 2.56.178.222 | UFO Hosting LLC | | 2.56.191.194 | 2.56.191.194 | Packethub S.A. | | 2.56.228.0 | 2.56.228.255 | HostRoyale Technologies Pvt Ltd | | 2.57.122.246 | 2.57.122.246 | TECHOFF SRV LIMITED | * **Fields** 3 * **Entries** 7.6M * **Last Updated** Yesterday * **CSV Size** 48.99 MB * **MMDB Filesize** 4.33 MB ### Comprehensive Security Pro Databases Bundles Access ready-made bundles that combine the Security Pro Databases with our other data feeds—delivering full coverage, effortless integration, and greater value in one package. #### IP to Security + Location (Standard) | Start ip | End ip | Country | State | State code | District | City | Zip code | Latitude | Longitude | Geo name id | Time zone name | Threat score | Is tor | Is proxy | Proxy provider names | Proxy confidence score | Proxy last seen | Is residential proxy | Is vpn | Vpn provider names | Vpn confidence score | Vpn last seen | Is relay | Relay provider name | Is anonymous | Is known attacker | Is bot | Is spam | Is cloud provider | Cloud provider name | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | 65.55.22.24 | 65.55.22.31 | US | Washington | US-WA | Grant County | Quincy | 98848 | 47.2343 | -119.85255 | 5807713 | America/Los_Angeles | 5 | false | false | [] | 0 | | false | false | [] | 0 | | false | | false | false | false | false | true | Microsoft Corporation | | 168.86.199.68 | 168.86.199.68 | GB | England | GB-ENG | Cambridgeshire | Comberton | CB23 | 52.18542 | 0.02056 | 2652502 | Europe/London | 45 | false | true | [soax] | 99 | 2026-06-18 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 69.197.123.228 | 69.197.123.228 | US | Illinois | US-IL | Menard County | Oakford No. 9 | 62673 | 40.10255 | -89.96317 | 4904463 | America/Chicago | 45 | false | true | [Zyte Proxy, Oxy Labs, NetNut] | 99 | 2026-06-19 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 78.24.8.0 | 78.24.8.255 | CZ | Prague | CZ-PR | Prague | Prague | 110 00 | 50.07913 | 14.43302 | 9947824 | Europe/Prague | 5 | false | false | [] | 0 | | false | false | [] | 0 | | false | | false | false | false | false | true | VSHosting s.r.o. | | 219.89.33.9 | 219.89.33.9 | NZ | Wellington | NZ-WGN | Wellington City | Wellington | 6011 | -41.29238 | 174.77875 | 10130262 | Pacific/Auckland | 45 | false | true | [Evomi Proxy] | 80 | 2026-05-10 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 194.99.24.192 | 194.99.24.192 | SE | Stockholm | SE-AB | Stockholm | Stockholm | 169 03 | 59.36845 | 18.00812 | 8128160 | Europe/Stockholm | 80 | false | false | [] | 0 | | false | true | [] | 75 | | false | | true | true | false | false | true | Limestone Networks, Inc. | | 101.108.112.27 | 101.108.112.27 | TH | Bangkok | TH-10 | Phra Nakhon | Bangkok | 10200 | 13.75633 | 100.50177 | 6845006 | Asia/Bangkok | 45 | false | true | [ProxyScrape] | 90 | 2026-05-28 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 104.244.243.42 | 104.244.243.42 | US | Illinois | US-IL | Cook | Chicago | 60602 | 41.88425 | -87.63245 | 4902090 | America/Chicago | 45 | false | true | [Oxy Labs] | 80 | 2026-05-10 | true | false | [] | 0 | | false | | true | false | false | false | false | | | 2604:ca00:1d8:0:0:0:0:0 | 2604:ca00:1d9:1287:0:0:45f:ffff | US | California | US-CA | Santa Clara | Mountain View | 94041 | 37.38967 | -122.0816 | 5375494 | America/Los_Angeles | 50 | false | false | [] | 0 | | false | false | [] | 0 | | true | Google Fi VPN | true | false | false | false | true | Google, LLC | | 69.159.239.195 | 69.159.239.195 | CA | Quebec | CA-QC | Montreal | Montreal | H3B | 45.50189 | -73.56739 | 7288804 | America/Toronto | 45 | false | true | [Evomi Proxy, DataImpulse] | 80 | 2026-05-10 | true | false | [] | 0 | | false | | true | false | false | false | false | | * **Fields** 23 * **Entries** 29.3M * **Last Updated** Yesterday * **CSV Size** 551.20 MB * **MMDB Filesize** 4.33 GB ### Browse all Database Tiers These are our database product families. Pick a tier to see its databases; you can buy individual datasets, bundle multiple, or request custom #### Accurate & Fresh Multi-source datasets refreshed daily, with rigorous QA and versioned releases. #### Global Coverage and Future Proof Comprehensive IPv4 and IPv6 coverage across regions with consistent schemas and versioned releases. #### Developer-Ready Formats Plug-and-play in MMDB, CSV, and JSON with stable schemas and changelogs. #### Buy Your Way Purchase databases individually, bundle them, or combine multiple for full coverage *Some Advance features vary by plan ### Geo Standard Reliable IP to location and ISP databases for personalization, targeting, and network optimization. [View Sample Data](https://ipgeolocation.io/geo-standard-databases.html) ### Geo Advance Popular Granular geolocation databases with ASN, company, WHOIS, and abuse contact details for deeper network intelligence. [Explore Field List](https://ipgeolocation.io/geo-advance-databases.html) ### Security Pro Threat intelligence databases that detect proxies, VPNs, Tor, bots, residential proxies, and hosting IPs to stop fraud. [See Threat Coverage](https://ipgeolocation.io/security-pro-databases.html) ## Frequently Asked Questions ### What is the Security Pro Database? **Answer:** Security Pro contains two key datasets: the Residential Proxy Database for detecting residential proxy IPs and the Security Threat Database for identifying risky IPs, including VPNs, proxies, bots, and known attackers. ### What is the residential proxy? **Answer:** A residential proxy uses a real IP address assigned by an ISP to a homeowner. It makes online activity appear as legitimate user traffic. ### How often is the data updated? **Answer:** The Security Pro Database updates daily to provide the latest threat insights, proxy usage, and risk activity patterns across IP ranges. ### Is there any free online, accurate VPN detection tool available? **Answer:** Our proxy checker [tool](https://ipgeolocation.io/ip-security-api.html) lets you try it for free a few times. You can quickly see if an IP address is a proxy, VPN, or Tor, and find out its type and risk. ### What is the datacenter proxy? **Answer:** A datacenter proxy uses an IP address provided by cloud services. These IPs are not linked to real residential users. ### Does Security Pro detect residential proxies? **Answer:** Yes, it identifies both residential and datacenter proxies to expose masked or manipulated traffic often used for fraud or abuse. ### What database formats are available? **Answer:** Our databases are available in CSV for easy integration and readability, and MMDB format for high-performance IP lookup with MaxMind-compatible systems and libraries.