Home CS AnonymIPs feed

CS AnonymIPs feed

IP Anonymization Feed

CS AnonymIPs feed is a unique software product that contains a feed of anonymized IP addresses in the TOR, PROXY & VPN categories, that were sold in the public space or DarkNet. CS AnonymIPs feed allows you to identify anomalies in network traffic, application traffic and can be used in various ways.

The product consists of selected streams of IP addresses data:

  • Anonymized  IP addresses (collected data from VPNs, Proxy servers and TORs);
  • ASN hosting data that is used frequently.

CS AnonymIPs feed can be integrated into a cybersecurity intrusion detection and prevention system. The product allows you to identify anomalies in network traffic and application traffic. CS AnonymIPs feed can be used as a stand-alone solution, as well as integrated into SIEM/SOAR and into other information security solutions.

Cybercriminals often hide their IP addresses in an attempt to circumvent network traffic monitoring systems. In order to commit fraudulent and hacking activities, they use virtual private networks (VPNs) or Internet proxies and use public VPNs and proxy services, as well as services with limited access to DarkNet. Traffic analysis of TOR and other services will assist in identifying criminals.

CS AnonymIPs feed contains information about VPNs, proxy services, hosting services where you can place any content (shockproof), IP addresses that are used to:

  • anonymization in fraudulent financial transactions with accounts;
  • ART attacks on corporate networks;
  • fraudulent login attempts through compromised accounts;
  • other cyberattacks that bypass the traffic monitoring system.
Want to know more?

Get a consultation
Why do companies choose CS AnonymIPs feed

The implementation of CS AnonymIPs feed in SIEM/TIP enables corporate networks to monitor traffic and decide whether to block or mark incoming and outgoing connections to IP addresses. This avoids cyber incidents and assesses the risks of unauthorized connections by people who use such IP addresses.

Why does CS AnonymIPs feed prevail over analogues

The product database lists not only IOCs, i.e. IP addresses from which cyberattacks have already been carried out, but also IP addresses with a dubious reputation that could potentially be used for criminal activities. Daily issuance of more than 300,000 active IPs with a high probability of attacks, while the rest of the companies such information appears in 2-6 weeks.


CS AnonymIPs feed allows users to perform in-depth traffic analysis, make decisions based on the data obtained, and prevent possible incidents.


Users can download reports from CS AnonymIPs feed in TXT, JSON formats. The product is integrated into SIEM, SOAR, Firewall systems, as well as into other security systems.

Related products and services
CyberArmy On-demand

Package of services for investigation, analysis, and investigation of information security incidents

The basic package includes:
• consulting with experts
• investigation of the IS incident
• comprehensive forensic examination of digital evidence
• reports on individuals / legal entities from open and closed sources
• a monthly newsletter with information about vulnerabilities actively used by hackers and recommendations for increasing the level of protection
• penetration testing
• scanning web applications and resources

Read more
CS Cred feed

Software product for detecting compromised accounts of the organization in open and closed sources

Thanks to CS Cred feed you can:

• identify compromised accounts, including when compromising third party resources
• prevent data leakage
• protect against the use of compromised passwords
• be informed about the leaks before it is widely covered in the media

Read more

Like many other companies, CyberSEALs uses cookie technology on its websites to improve your user experience, as well as for the proper functioning of the website.

If you agree to the use of all cookies on this site, click the Ok button. To learn more about cookie technology, its benefits and how CyberSEALs uses it, check out our Privacy policy