> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vouch.expert/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Reputation

> Detect VPNs, proxies, Tor, and fraudulent IP addresses

## Overview

IP reputation checking analyzes the IP address of validation requests to detect VPNs, proxy servers, Tor networks, data centers, and known fraudulent sources.

<Note>
  Typically configured as **FLAG** since many legitimate users use VPNs for privacy.
</Note>

## What We Detect

<CardGroup cols={2}>
  <Card title="VPN Services" icon="shield">
    Commercial VPN providers (NordVPN, ExpressVPN, etc.)
  </Card>

  <Card title="Tor Network" icon="user-secret">
    Tor exit nodes for anonymous browsing
  </Card>

  <Card title="Proxy Servers" icon="server">
    Public and private proxy services
  </Card>

  <Card title="Data Centers" icon="building">
    Cloud provider IPs (AWS, Google Cloud, Azure)
  </Card>

  <Card title="Known Fraud" icon="triangle-exclamation">
    IPs associated with previous fraud
  </Card>

  <Card title="Hosting IPs" icon="network-wired">
    Web hosting and colocation facilities
  </Card>
</CardGroup>

## API Response

```json theme={null}
{
  "checks": {
    "ip": {
      "pass": false,
      "latency": 45.7
    }
  },
  "signals": ["vpn_detected"]
}
```

<ParamField path="pass" type="boolean">
  `false` if VPN or fraud detected, `true` if residential IP
</ParamField>

<ParamField path="latency" type="number">
  Check execution time in milliseconds
</ParamField>

## Configuration

<Card title="FLAG" icon="flag" color="#f59e0b">
  Recommended to FLAG VPNs since many users legitimately use them for privacy.
</Card>

## Next Steps

<CardGroup cols={2}>
  <Card title="Device Fingerprint" icon="fingerprint" href="/validation/device-fingerprint">
    Track multi-account abuse
  </Card>

  <Card title="Validation Overview" icon="shield" href="/validation/overview">
    Back to overview
  </Card>
</CardGroup>