Why is traffic not being blocked?

If Spur identifies a provider such as NetNut, does that mean the traffic originated directly from that provider's customer?

Not necessarily. Proxy ecosystems often involve resellers, downstream providers, SDK operators, and shared infrastructure. A provider label identifies infrastructure associated with the traffic but should not be treated as attribution of a specific end user without additional evidence and investigation.

Do you have a confidence score or last seen date?

Spur operates on a "high confidence" only model to reduce the likelihood of false positives ever making it into our data. Our mentality is that our customers should trust us to decide if something is true rather than providing an arbitrary score to constantly adjust higher or lower. Every API request or Monocle session provides the latest true information for that moment in time. On-prem solutions are updated at their purchased cadence (daily or real-time). We actively purge any result that is no longer true and maintain smart age-offs to maintain the most accurate snapshot of data each day.

What information does Spur provide about an IP address?

Depending on the product and integration, Spur may provide intelligence related to:

What products does Spur offer?

Spur delivers IP intelligence as bulk daily downloads, through API integration into existing security pipelines, and via real-time session enrichment.

What does Spur do?

Spur provides IP intelligence that helps organizations identify anonymization technologies to make more informed security, fraud prevention, and trust decisions.