Threat detection that runs on your servers
VPNs, proxies, bots, AI crawlers, Tor nodes, disposable emails, and known attackers - identified locally, from your own servers. A data layer that runs underneath your existing security tools and makes each one more effective.
Private by Design
All data processing stays on your infrastructure. Your users' data never leaves your servers.
Updated Monthly
Every database is refreshed monthly with verified threat data.
€99/year
All databases included. No per-query fees, no usage limits.
Layers Into Your Stack
Not a replacement for reCAPTCHA, WAFs, or firewalls - a data layer that runs underneath them and makes each one more effective.
Database snapshot · updated monthly
Threat intelligence overview
Where suspicious traffic concentrates
Explore an illustrative 24-hour view of regional risk signals. Hover a hotspot to inspect its relative volume.
Illustrative risk activity is highest in North America and Asia Pacific, followed by Europe and the Middle East. This visual is a product demonstration, not live customer traffic.
Why threat detection matters
Every day, malicious actors target online applications with fraud, scraping, and abuse. Proper detection helps you reduce losses and protect real users.
What we help you detect
From VPNs and proxies to AI scrapers and disposable emails - see the types of threats AntiProxies helps you identify and block.
VPN & Proxy Detection
Identify connections using anonymization services
A VPN or proxy match is context, not proof of abuse. Our database tracks 1,000+ commercial VPN providers alongside residential proxy networks, datacenter ranges, and known proxy infrastructure so you can apply the response that fits your risk model.
Disposable Email Detection
Block temporary and throwaway emails
Disposable email addresses are a primary tool for creating fake accounts, abusing free trials, and bypassing verification. Our database covers 150,000+ known disposable email domains and is updated monthly.
Bot Detection
Identify automated and headless browsers
Automated traffic can scrape content, abuse APIs, submit spam forms, and skew analytics. AntiProxies supplies known-bot, crawler, user-agent, fingerprint, and network signals that you can combine with behavior observed in your own application.
Tor Exit Node Detection
Identify traffic from the Tor network
Tor supports legitimate privacy needs and can also hide the origin of abusive traffic. We maintain Tor node data so your application can identify a Tor connection and apply a proportionate policy instead of assuming every Tor user is malicious.
ISP & ASN Reputation
Check ISP and network reputation
Not all ISPs are created equal. Some have high concentrations of abusive traffic. We maintain reputation profiles for 10,000+ ISPs and ASNs to help you assess risk at the network level.
Local Risk Scoring
Combine database matches with your own rules
Combine signals from all AntiProxies databases into a single weighted risk score. Assign weights per signal, set your own thresholds, and act on a number rather than juggling six separate checks.
* Based on internal testing against known threat databases.
A straightforward local integration
Download the files, load the relevant fields into your datastore, test your rules, and deploy them on your own schedule. No AntiProxies SDK or runtime API is required.
Download databases
Get your databases in CSV/JSON format and load them into your preferred data store (MySQL, Redis, flat files, etc.).
Integrate into your app
Add a few lines of code to query the databases when a user registers, logs in, or submits a form. Check IPs, emails, or both.
Query locally
Look up IPs against the VPN/proxy database, check emails against the disposable list, and cross-reference ISP reputation - all within your own infrastructure.
Take action
Block, challenge, or flag suspicious users based on the results. You control the logic - no third-party decisions.
prepare("SELECT provider, type FROM vpn_ips WHERE ip_start <= INET_ATON(?) AND ip_end >= INET_ATON(?)");
$stmt->execute([$ip, $ip]);
$vpn_match = $stmt->fetch();
// Check if email domain is disposable
$email_domain = explode('@', $user_email)[1];
$stmt = $pdo->prepare("SELECT 1 FROM disposable_domains WHERE domain = ?");
$stmt->execute([$email_domain]);
$is_disposable = $stmt->fetch();
// Take action based on local results
if ($vpn_match || $is_disposable) {
// Block, challenge, or flag the user
header('HTTP/1.1 403 Forbidden');
exit('Suspicious activity detected');
}Use the data in the stack you already run
Standard CSV files that work everywhere - PHP, Python, Node.js, Go, or any language. Plus ready-made blocking snippets for Nginx, Apache, Cloudflare, AWS WAF, iptables, and more. No SDKs, no vendor lock-in.
- Standard CSV format for all data
- Works with MySQL, PostgreSQL, Redis, or flat files
- PHP, Python, Node.js - any language works
- Code snippets for Nginx, Apache, Cloudflare, AWS WAF, iptables, and more
- Automate monthly updates with a simple cron job
prepare(
"SELECT provider FROM vpn_ips
WHERE ip_start <= INET_ATON(?)
AND ip_end >= INET_ATON(?)"
);
$stmt->execute([$ip, $ip]);
return $stmt->fetch();
}
function is_disposable_email($pdo, $email) {
$domain = explode('@', $email)[1] ?? '';
$stmt = $pdo->prepare(
"SELECT 1 FROM disposable_domains WHERE domain = ?"
);
$stmt->execute([$domain]);
return (bool) $stmt->fetch();
}
// Usage in your registration flow
$ip = $_SERVER['REMOTE_ADDR'];
$email = $_POST['email'];
if (is_vpn_ip($pdo, $ip) || is_disposable_email($pdo, $email)) {
die('Registration blocked for security reasons.');
}Start detecting threats today
22 categories of threat data. €99/year. 30-day money-back guarantee. Simple CSV files, no complex integration required.