GeoIP Anonymous Plus binary database fields

The GeoIP Anonymous Plus binary database contains the following fields for each network.

NameTypeDescription
anonymizer_confidenceuint16

A score ranging from 1 to 99 that represents our percent confidence that the network is currently part of an actively used VPN service.

Currently, we will only provide values of 30 and 99, but the number of values will increase as we improve our confidence ratings.

Learn more about anonymizer confidence on our Knowledge Base.

is_anonymousboolean

This is true if the IP address belongs to any sort of anonymous network. This key is only present when the value is true.

Learn more about anonymizer and proxy detection on our Knowledge Base.

is_anonymous_vpnboolean

This is true if the IP address is registered to an anonymous VPN provider. If a VPN provider does not register subnets under names associated with them, we will likely only flag their IP ranges using the is_hosting_provider flag. This key is only present when the value is true.

Learn more about VPNs on our Knowledge Base.

is_hosting_providerboolean

This is true if the IP address belongs to a hosting provider. This key is only present when the value is true.

Learn more about hosting providers used for anonymizing on our Knowledge Base.

is_public_proxyboolean

This is true if the IP address belongs to a public proxy. This key is only present when the value is true.

Learn more about public proxies on our Knowledge Base.

is_residential_proxyboolean

This is true if the IP address is on a suspected anonymizing network and belongs to a residential ISP (does not include peer-to-peer proxy IPs). This key is only present when the value is true.

Learn more about residential proxies on our Knowledge Base.

is_tor_exit_nodeboolean

This is true if the IP address is a Tor exit node. This key is only present when the value is true.

Learn more about Tor exit nodes on our Knowledge Base.

network_last_seenstring

The last day that the network was sighted in our analysis of anonymized networks. This is in the ISO 8601 date format (YYYY-MM-DD).

Learn more about anonymizer and proxy detection on our Knowledge Base.

provider_namestring

The name of the VPN provider (e.g., nordvpn, surfshark) associated with the network.

Please note that MaxMind identifies a subset of VPN providers. A current list of VPN providers identified in the Anonymous Plus database is available on request.

Learn more about VPN provider detection on our Knowledge Base.