Skip to main content

Overview

IP reputation checking analyzes the IP address of validation requests to detect VPNs, proxy servers, Tor networks, data centers, and known fraudulent sources.
Typically configured as FLAG since many legitimate users use VPNs for privacy.

What We Detect

VPN Services

Commercial VPN providers (NordVPN, ExpressVPN, etc.)

Tor Network

Tor exit nodes for anonymous browsing

Proxy Servers

Public and private proxy services

Data Centers

Cloud provider IPs (AWS, Google Cloud, Azure)

Known Fraud

IPs associated with previous fraud

Hosting IPs

Web hosting and colocation facilities

API Response

{
  "checks": {
    "ip": {
      "pass": false,
      "latency": 45.7
    }
  },
  "signals": ["vpn_detected"]
}
pass
boolean
false if VPN or fraud detected, true if residential IP
latency
number
Check execution time in milliseconds

Configuration

FLAG

Recommended to FLAG VPNs since many users legitimately use them for privacy.

Next Steps