Privacy Detection Extended Database

Privacy Detection extended database reveals IP addresses linked to VPNs, Tor, proxies, relays, and hosting services. The database helps users to understand how we detect anonymous IP addresses so that they can use this information to build personalized cybersecurity policies.

Database Schema

The Privacy Detection extended database contains the following fields:

Field NameExampleData TypeDescription
start_ip62.182.99.0TEXTFirst IP address of the range
end_ip62.182.99.255TEXTLast IP address of the range
hostingFalseBOOLEANIndicates hosting service IP address (data center, cloud service, bots, scrapers, etc.)
proxyFalseBOOLEANIP address associated with a proxy service
torFalseBOOLEANTor exit node IP address
vpnTrueBOOLEANIP address associated with a VPN service
relayFalseBOOLEANPrivate relay service IP address (Apple relay, Cloudflare, Akamai etc.)
vpn_nameNordVPNTEXTName of the privacy service provider includes VPN, Proxy and Relay service providers names
anycastFalseBOOLEANTrue: if IP is identified as being any anycast IP, that could map to multiple physical servers in different locations
censusTrueBOOLEANTrue: if we've identified VPN software running on this IP as part of our internet wide scan (successful openvpn or ipsec handshake)
device_activityTrueBOOLEANTrue: if we've seen VPN-like behavior (multiple devices, multiple locations etc)
whoisFalseBOOLEANTrue: if we've seen vpn provider attributes in the IP whois data (eg. provider name)
vpn_configTrueBOOLEANTrue: if we've identified this IP in a VPN config file
census_port500INTEGERPort number we've identified VPN software running on

Sample Database

A screen image showing the table provided by our Privacy Detection Extended Database Download