Source IP is a known VPN / proxy / Tor exit

rep.known_proxy_exit  ·  corroborates

reputationlayer
reputationcategory

What it catches

Producer: detector IP-CIDR classifier; lists from Tor bulk exit list / X4BNet/lists_vpn / firehol anonymizers. See docs/ip-reputation-data.md

Signals it reads

reputation.is_proxy_exit

How it fires

present

← all detections