Definition
Enrichment and attribution of IP addresses to reveal VPNs, residential-proxies, botnets, and other anonymizing infrastructure behind observed traffic.
Key Points
- Complements application-layer bot-detection when behavior looks human
- Spur 2026 study (company): 94% of orgs saw anonymizing VPN/proxy in incidents