Privacy Detection Database Download

Identify IPs associated with VPNs, proxies, tor nodes, relays, and hosting providers to support smarter and safer decisions. Use our accurate, continuously updated IP data to develop threat intelligence, reduce advertising and gaming fraud, protect digital content, improve fraud risk models, and so much more.

Privacy detection database

start_ip	end_ip	hosting	proxy	tor	vpn	relay	service
172.225.4.0	172.225.4.175	✓	✕	✕	✕	✓	Apple Private Relay
95.181.235.157	95.181.235.157	✓	✕	✕	✓	✕	Private Internet Access
10.23.1.86	10.23.1.86	✕	✕	✕	✓	✕	ExpressVPN
2001:ac8:20:c5::7	2001:ac8:20:eb::1	✓	✕	✕	✓	✕	Mullvad
10.0.232.33	10.0.232.33	✕	✕	✕	✓	✕	TrustZone
107.189.8.56	107.189.8.56	✓	✕	✓	✓	✕	ProtonVPN
5.181.233.55	5.181.233.121	✓	✕	✕	✓	✕	NordVPN
104.152.222.155	104.152.222.159	✕	✕	✕	✓	✕	Windscribe

Accuracy, reliability, and industry-leading insights

Real-Time Updates
Daily updated datasets reflecting the dynamic online landscape.

Enterprise-Grade Integrations
Integrate easily into your existing systems.

Compliance Ready
Keep sensitive IP intelligence within your infrastructure.

Comprehensive IP Data Coverage

By leveraging our IP privacy detection databases, businesses can strengthen their security posture, reduce fraud risk, and make smarter, data-driven decisions with the most accurate IP privacy data on the market.

Unlock deep visibility into anonymizing IPs with <a href='/developers/privacy-detection-database' class='underline text-blue-primary'>IPinfo's privacy detection database</a>, designed for precise threat detection, fraud prevention, and advanced security policy development.

Need more? Use our <a href='/developers/privacy-detection-extended' class='underline text-blue-primary'>privacy detection extended dataset</a>, which provides even richer insights and advanced metadata fields.

Proxy, Tor, VPN, and, Relay Indicators: Identify IP roles such as VPNs, proxies, Tor nodes, and private relays like Apple Relay and Cloudflare.

Hosting Provider Detection: Flag IPs linked to data centers, cloud services, bots, and scrapers, distinguishing business-critical from suspicious traffic.

Residential Proxy Detection: Tracks IPv4 and IPv6 IPs, providing details on the associated proxy service, last seen date, and percentage of days active. Learn more.

Service Provider Identification: Pinpoint exact service names for VPNs, proxies, and relays for deeper contextual insights.

Anycast IP Identification: Detect IPs mapped to multiple servers worldwide for precise geolocation intelligence.

Device Activity Monitoring: Detect VPN-like behaviors such as multi-location access or frequent IP switches.

WHOIS Data Insights: Cross-reference IP ownership details with WHOIS records for enhanced provider validation.

VPN Configuration Check: Verify active VPN configurations by detecting open ports and analyzing VPN-related files.

Broad Context, Deep Insights

Our multi-source data collection approach ensures broader coverage and a deeper understanding of privacy-related IPs. By combining diverse data streams with rigorous validation, we provide best-in-class IP privacy data that leading cyber security companies trust for precise, actionable insights.

Diverse Data Sources: We gather data from Tor exit node directories, WHOIS records, and anonymous IP provider networks for unmatched coverage.

Behavioral Analysis: We detect unusual IP activity to uncover anonymizing services, like sudden location changes and shifting traffic patterns.

Active Verification: Our proprietary Probe Network performs real-time VPN handshake tests, ensuring industry-leading data accuracy.

Our privacy detection process involves:

Data Collection: Utilizing probe networks, proprietary detection algorithms, and third-party validations.

Data Processing: Aggregating and cleaning data for maximum accuracy.

Data Delivery: Tailored data downloads for real-time insights.

Trusted by some of the most secure businesses

Microsoft, Stone, WorldRemit, VMWare, WordPress, Intel, Accenture, Panorays, John Deere, Nokia

How Companies Are Using Our Privacy Detection IP Data

FRAUD PREVENTIONECOMMERCEFINANCIAL TECHNOLOGYTRAVELTECH

Identify Suspicious IP Activity

Detect IPs linked to proxies, VPNs, and anonymizing services commonly used by fraudsters to conceal their true locations. With early detection and automated risk scoring, prevent payment fraud, account takeovers, and spam attacks.

CYBERSECURITY

Enhance Network Security & Threat Analysis

Monitor traffic from anonymized IPs and flag suspicious access attempts. Integrate our data into your SIEM, SOAR, or firewall systems to strengthen real-time threat detection, incident response, and vulnerability management.

GOVERNMENTS AND INSTITUTIONSMEDTECH AND HEALTHCAREFINANCIAL TECHNOLOGYGAMETECH

Ensure Data Access Compliance

Detect IPs linked to VPNs, proxies, and anonymizers to enforce geographic and regulatory restrictions. This will maintain data residency compliance and control access based on verified user locations.

ADVERTISING TECHNOLOGY

Ad Fraud & Optimize Targeting

Filter out fraudulent ad clicks from anonymized IP addresses, maximizing ad campaign effectiveness. Use accurate geolocation data to improve ad targeting, increase ROI, and reduce wasted spend on fake traffic.

DIGITAL MEDIA AND ENTERTAINMENT

Unauthorized Content Access

Detect and block IPs using VPNs or proxies attempting to bypass geographic content restrictions. Enforce licensing agreements and protect premium content from piracy and unauthorized distribution.

GAMETECH

Prevent Cheating & Maintain Compliance

Detect and block IPs from VPNs, proxies, and anonymizing services often used to cheat, evade IP bans, or manipulate in-game content. Maintain a safe, fair, and compliant gametech environment.

FINANCIAL TECHNOLOGYFRAUD PREVENTION

Strengthen Identity Verification

Verify true user identities by combining IP data with device intelligence and user behavior analysis. Confirming legitimate user locations while flagging mismatched or anonymous IPs reduces false positives.

We ended up evaluating two different vendors where IPInfo proved to be better both in terms of overall performance (number of correctly identified VPNs) and data labeling.

Petr Palata

Sr Technical Product Manager, Fingerprint

IPinfo's VPN detection proved to be 100% accurate in their tests. The other competitors, at any level, proved to be wildly inaccurate. That's how we knew their geolocation capabilities would meet our needs.

Olegas Murasko

VP Engineering, TransferGo

IPinfo was the easiest way to integrate and also offered the most correct data. We’ve seen a clear improvement in our results, and we haven't seen that with other data providers.

Yonko Tsonev

Head of IT at Adcash

We ended up evaluating two different vendors where IPInfo proved to be better both in terms of overall performance (number of correctly identified VPNs) and data labeling.

Petr Palata

Sr Technical Product Manager, Fingerprint

Olegas Murasko

VP Engineering, TransferGo

Looking for a plug and play API solution?

We offer the same data through our API that’s designed for easy implementation. We also offer integrations, libraries and our data experts are ready to troubleshoot or help design new use cases as needed.

Flexible and Adaptable Data Retrieval

Secure data downloads, data push, ecosystem integrations, and custom enterprise solutions. Access our IP data effortlessly and innovate quickly with secure data access through your existing pipelines and processes. Learn how easy it is to get started reading our documentation.

Choose your download schedule

We refresh our database every 24 hours. Download our data as often as every day for the freshest insights.

Select your ideal format

We support CSV, JSON, MMDB, and XML. Plus, we’re happy to support any popular format if you have a requirement.

Customize your data feed

We help combine datasets from multiple sources into one unified feed. From anonymous data sources to IP ranges, choose what datasets you view together.

Data fields	Description
hosting	Indicates whether the IP is associated with a hosting service, commonly used by bots, scrapers, or malicious traffic.
proxy	Indicates whether a proxy service is present on the IP, often used for anonymity or bypassing restrictions.
tor	Indicates whether the IP is a Tor exit node, used for anonymous browsing and privacy protection.
vpn	Indicates whether a VPN service is active on the IP, commonly used for secure and private internet access.
relay	Indicates whether a private relay service (e.g., Apple Private Relay) is present on the IP.
service	Provides the name or provider of the detected service.
anycast	Indicates whether the IP is identified as an anycast IP, which can map to multiple physical servers in different locations.
census	Indicates whether VPN software has been detected on the IP during an internet-wide scan (e.g., successful OpenVPN or IPsec handshake).
device_activity	Indicates whether VPN-like behavior has been observed, such as activity from multiple devices or locations.
whois	Indicates whether the IP's WHOIS data contains attributes of a VPN provider, such as the provider's name.
vpn_config	Indicates whether the IP has been found in a known VPN configuration file.
census_port	Specifies the port number where VPN software has been detected running on the IP.

Prefer data in a specific format? We support all the important ones

PARQUET

Filesize	68.39 MB
Fields	9
Last updated	Yesterday
Entries	11,898,909

CSV

Filesize	689.65 MB
Fields	9
Last updated	Yesterday
Entries	11,898,909

JSON

Filesize	1.96 GB
Fields	9
Last updated	Yesterday
Entries	11,898,909

MMDB

Filesize	290.11 MB
Fields	9
Last updated	Yesterday
Entries	11,898,909

Need data in a format not mentioned here? Contact us

Frequently Asked Questions

What is the privacy detection database?

The privacy detection database is a comprehensive dataset that identifies IP addresses associated with VPNs, proxies, Tor nodes, relays, and hosting providers. It helps businesses improve security, prevent fraud, and comply with regulations.

What is the difference between the privacy detection database and the privacy detection extended dataset?

The privacy detection database provides core IP identification fields, while the extended dataset includes advanced metadata such as service names, device activity, and VPN configurations for deeper analysis.

How is the privacy detection database different from an API? Why choose a database over an API?

The database download provides offline access, bulk data processing, and compliance. An API offers real-time lookups, but the database is ideal for large-scale data integrations and companies with strict data residency needs.

How frequently is the privacy detection database updated?

The database is refreshed daily, ensuring access to the latest IP intelligence. Custom update frequencies (weekly or monthly) are also available based on business needs.

How does IPinfo ensure data accuracy?

We combine multiple data sources, including our proprietary probe network, WHOIS records, and behavioral analysis. Our rigorous validation ensures the most accurate and reliable IP privacy data in the market.

How secure is the data delivery process?

We provide secure data downloads through encrypted delivery channels, including cloud storage integrations (S3, GCS) and enterprise-grade SFTP.

What is the difference between residential proxies and data center proxies?

Residential proxies are associated with home internet connections, while data center proxies come from hosting providers or cloud services. We offer both in different datasets for accurate IP context.

How can I integrate the privacy detection database into my system?

We support seamless integration through secure downloads, custom API endpoints (on request), and direct cloud storage solutions, making it easy to add our IP data into any security or analytics workflow.

What formats are available for the database download?

The database is available in CSV, JSON, MMDB, and Parquet formats, enabling easy integration into a wide range of platforms and applications.

What type of licensing is offered for the privacy detection database?

We offer flexible licensing options depending on your business scale and data usage needs, including internal-only usage or third-party products for resale/redistribution in an open or closed system.

Custom database download subscriptions

For complex business needs

Choose and combine any datasets

IP to Geolocation database
ASN database
Privacy Detection database
Company database
Abuse Contact database
IP Ranges database (Country)
IP to Mobile Carrier database
IP Whois Database
Hosted Domains database
Residential Proxy database