Fraud Blocker™ Fraudulent IP Address Database

**Secure Your Infrastructure and Cleanse Your Data with Fraud Blocker’s IP Intelligence.**

<p><br/></p>

Fraud Blocker for Snowflake provides a comprehensive, high-performance dataset designed for security teams, data engineers, marketers and risk analysts.

Unlike standard IP databases that only provide static location data, Fraud Blocker delivers a **real-time "Fraud Score"** and advanced bot classification, including specific identification for LLM crawlers, giving you a 360-degree view of every IP address interacting with your business.

This dataset is purpose-built for Snowflake, featuring IP Integer formats to allow for high-speed joins against your internal log files with minimal latency.

<p><br/></p>

**Key Data Points Included:**

- **Dynamic Fraud Scoring:** A proprietary risk score based on the last 30 days of malicious activity, allowing you to filter IPs based on their recent threat profile.
- **Advanced Bot Detection:** Go beyond "Bot vs. Human." Categorize traffic into Good Bots (Search Engines), Social Bots (Meta), and the latest LLM Bots (AI crawlers) to protect your intellectual property.
- **Privacy & Anonymity Flags:** Instantly identify traffic originating from VPNs, Tor exit nodes, and Data Centers to prevent account takeovers and bypass attempts.
- **Granular Geo-Location:** Precise mapping including Country, City, and State/Region (both name and ISO codes).
- **Network Context:** Full ASN (Autonomous System Number) and Organization data for deep architectural insights.<br/>

**Why Choose Fraud Blocker?**

- **Optimized for Snowflake:** Includes IP Address Integer fields, enabling your team to perform massive data enrichment tasks without the overhead of complex CIDR parsing.
- **Reduced False Positives:** By analyzing a 30-day rolling window of fraud, we provide a nuanced view of risk that distinguishes between temporary compromises and dedicated malicious infrastructure.
- **Dedicated to Fraud Prevention:** Unlike generic IP geolocation databases that treat security as an afterthought, Fraud Blocker is a dedicated cyber-security platform built exclusively to mitigate risk. We process millions of global events monthly to identify botnets and help prevent fraudulent activity in real time.

**Common Use Cases:**

- **Marketing Integrity:** Identify and remove invalid traffic (IVT) from your attribution models to find your true ROAS/ROI
- **Data Quality & ML Hygiene:** Cleanse your internal datasets before training machine learning models or generating BI reports to ensure that "human" behavioral patterns aren't being skewed by bot activity or data center noise.
- **Financial Risk:** Score IPs during login or checkout to mitigate the risk of credit card fraud and account takeovers.
- **Security (SIEM/SOAR):** Enrich firewall and access logs to flag or block high-risk connections in real-time.

原始信息汇总

数据集概述

数据集名称：Fraud Blocker™ Fraudulent IP Address Database

提供商：Fraud Blocker

数据集描述：这是一个专为 Snowflake 优化的高性能 IP 风险情报数据集，旨在帮助安全团队、数据工程师、营销人员和风险分析师评估每个 IP 地址的风险等级。数据集不仅包含静态位置信息，还提供实时“欺诈评分”、高级机器人分类（包括 LLM 爬虫识别）、隐私与匿名标志（VPN、Tor、数据中心）、精细地理定位和网络上下文（ASN 和组织）。数据基于过去 30 天的恶意活动动态计算风险分数，以减少误报。

核心数据字段（数据字典中的表 IP_RISK_SCORES）：

字段名	类型	描述
ip_address	Varchar	点分十进制表示的 IP 地址
ip_address_int	Number	整型表示的 IP 地址
fraud_score	Float	与 IP 地址相关的欺诈风险评分（0-10）
country	Varchar	IP 地址所在国家
city	Varchar	IP 地址所在城市
asn	Varchar	自治系统编号
is_google_ip	Boolean	是否为已知的 Google 爬虫 IP
is_ai_crawler_ip	Boolean	是否为已知的 AI（LLM）爬虫 IP
is_ai_crawler_service	Varchar	关联的 AI 爬虫服务
is_datacenter	Varchar	是否为数据中心 IP

更新频率：每日（Daily）

时间覆盖范围：最近 90 天（按天提供）

数据交付方式：Secure share（安全共享）

试用与定价：提供 14 天无限免费试用；定价为“全球 IP 信誉与风险评分”产品（具体价格需在平台获取）。

数据类别：地理空间（Geospatial）、营销（Marketing）、安全（Security）

联系信息：

• 销售联系：[e-mail]
• 客服支持：[e-mail]

主要业务用途：

• 数据增强：将内部日志与客户数据与 IP 情报关联，补充 ASN、地理位置、VPN/TOR 状态等上下文。
• 欺诈预防与风险缓解：利用欺诈评分（基于近 30 天计算）识别和阻止高风险 IP，防止欺诈交易和账户盗用。
• 机器人管理与流量过滤：区分好机器人（如 Google、Meta）、LLM 机器人和爬虫，优化服务器资源并净化分析数据。
• 网络安全与威胁情报：识别来自已知 Tor 出口节点和数据中心的恶意连接，加强安全防御。
• 广告完整性与支出优化：过滤无效流量（IVT），确保广告预算触达真实用户。

使用示例（包含 SQL 查询）：

• 查询高风险的 IP 地址：SELECT * FROM IP_RISK_SCORES WHERE "fraud_score" >= 7
• 按国家筛选高风险 IP：SELECT "ip_address", "country", "fraud_score" FROM IP_RISK_SCORES WHERE "fraud_score" >= 7 ORDER BY "country" DESC
• 预览数据库：SELECT * FROM IP_RISK_SCORES LIMIT 100
• 查询特定国家黑名单 IP：SELECT * FROM IP_RISK_SCORES WHERE "is_open_source_blacklist" = true AND "country" = US