Activity From Anonymous IP Address — Detection Rule

Identifies that users were active from an IP address that has been identified as an anonymous proxy IP address.