[{"data":1,"prerenderedAt":332},["ShallowReactive",2],{"navLinks":3,"sidebar_docs_navigation_\u002Fproxy-vpn-detection":124,"navigation":125,"navLinks_footer":166,"page-\u002Fproxy-vpn-detection":196},{"id":4,"extension":5,"links":6,"meta":121,"stem":122,"__hash__":123},"navigationMenu\u002Fnavigation.json","json",[7,57,62,103],{"label":8,"icon":9,"nested":10,"children":11},"API Products","i-lucide-box",true,[12,17,22,27,32,37,42,47,52],{"label":13,"to":14,"description":15,"icon":16},"Full IP Lookup","\u002Ffull-ip-lookup","Enrich any IP with complete intelligence","i-lucide-globe",{"label":18,"to":19,"description":20,"icon":21},"Proxy & VPN Detection","\u002Fproxy-vpn-detection","Identify proxies and VPN networks","i-lucide-shield-alert",{"label":23,"to":24,"description":25,"icon":26},"Tor Exit Nodes","\u002Ftor-exit-nodes","Block Tor anonymity network traffic","i-lucide-eye-off",{"label":28,"to":29,"description":30,"icon":31},"Granular Geolocation","\u002Fgranular-geolocation","Highly accurate location mapping","i-lucide-map-pin",{"label":33,"to":34,"description":35,"icon":36},"Threat Scoring System","\u002Fthreat-scoring-system","Unified traffic risk score","i-lucide-activity",{"label":38,"to":39,"description":40,"icon":41},"ASN & Carrier Data","\u002Fasn-carrier-data","Identify autonomous systems","i-lucide-server",{"label":43,"to":44,"description":45,"icon":46},"Disposable Email Check","\u002Fdisposable-email-check","Detect temporary email domains","i-lucide-mail",{"label":48,"to":49,"description":50,"icon":51},"User Agent Parser","\u002Fuser-agent-bot-parser","Parse messy HTTP headers","i-lucide-bot",{"label":53,"to":54,"description":55,"icon":56},"Verified Bots","\u002Fverified-bots-crawlers","Identify legitimate search engine crawlers","i-lucide-check-circle",{"label":58,"to":59,"icon":60,"nested":61},"Pricing","\u002Fpricing","i-lucide-credit-card",false,{"label":63,"to":64,"icon":65,"nested":10,"children":66},"Docs","\u002Fdocs","i-lucide-book-open",[67,71,76,81,86,91,95,98],{"label":68,"to":64,"description":69,"icon":70},"Getting Started","Learn how to setup and use IP Shield","i-lucide-rocket",{"label":72,"to":73,"description":74,"icon":75},"All Endpoints","\u002Fdocs\u002Fendpoints\u002Femail-domain-check","Reference for all IP Shield REST API endpoints","i-lucide-plug",{"label":77,"to":78,"description":79,"icon":80},"Network API","\u002Fdocs\u002Fendpoints\u002Fnetwork","Network intelligence and routing data","i-lucide-network",{"label":82,"to":83,"description":84,"icon":85},"Summary API","\u002Fdocs\u002Fendpoints\u002Fsummary","Full IP intelligence summary","i-lucide-bar-chart-2",{"label":87,"to":88,"description":89,"icon":90},"Lookup IP API","\u002Fdocs\u002Fendpoints\u002Flookup-ip","Single IP data lookup","i-lucide-search",{"label":92,"to":93,"description":94,"icon":31},"Geo Check API","\u002Fdocs\u002Fendpoints\u002Fgeo-check","Check geographic location",{"label":96,"to":73,"description":97,"icon":46},"Email Domain Check API","Verify disposable email domains",{"label":99,"to":100,"description":101,"icon":102},"User Agent Check API","\u002Fdocs\u002Fendpoints\u002Fuser-agent-check","Detect malicious user agents","i-lucide-monitor",{"label":104,"icon":105,"nested":10,"children":106},"Resources","i-lucide-library",[107,112,117],{"label":108,"to":109,"icon":110,"description":111},"About Us","\u002Fabout","i-lucide-info","Learn more about IP Shield and our mission",{"label":113,"to":114,"icon":115,"description":116},"Blog","\u002Fblog","i-lucide-newspaper","Latest news, updates, and security articles",{"label":118,"to":119,"description":120,"icon":46},"Contact Us","\u002Fcontact","Get in touch with our support team",{},"navigation","OH-Zj4UmYqVQJC8Ts6f4KeKRzXJYi5trdK22JpX9Y0Q",[],[126],{"title":63,"path":64,"stem":127,"children":128},"docs",[129,132,149],{"title":130,"path":64,"stem":131},"Introduction","docs\u002Findex",{"title":133,"path":134,"stem":135,"children":136,"page":61},"Credit & Authorization","\u002Fdocs\u002Fcredits-and-auth","docs\u002Fcredits-and-auth",[137,141,145],{"title":138,"path":139,"stem":140},"Authentication","\u002Fdocs\u002Fcredits-and-auth\u002Fauth","docs\u002Fcredits-and-auth\u002Fauth",{"title":142,"path":143,"stem":144},"Credits & Usage","\u002Fdocs\u002Fcredits-and-auth\u002Fcredits-usage","docs\u002Fcredits-and-auth\u002Fcredits-usage",{"title":146,"path":147,"stem":148},"Rate Limits","\u002Fdocs\u002Fcredits-and-auth\u002Frate-limits","docs\u002Fcredits-and-auth\u002Frate-limits",{"title":150,"path":151,"stem":152,"children":153,"page":61},"API Endpoints","\u002Fdocs\u002Fendpoints","docs\u002Fendpoints",[154,156,158,160,162,164],{"title":96,"path":73,"stem":155},"docs\u002Fendpoints\u002Femail-domain-check",{"title":92,"path":93,"stem":157},"docs\u002Fendpoints\u002Fgeo-check",{"title":87,"path":88,"stem":159},"docs\u002Fendpoints\u002Flookup-ip",{"title":77,"path":78,"stem":161},"docs\u002Fendpoints\u002Fnetwork",{"title":82,"path":83,"stem":163},"docs\u002Fendpoints\u002Fsummary",{"title":99,"path":100,"stem":165},"docs\u002Fendpoints\u002Fuser-agent-check",{"id":4,"extension":5,"links":167,"meta":195,"stem":122,"__hash__":123},[168,179,180,190],{"label":8,"icon":9,"nested":10,"children":169},[170,171,172,173,174,175,176,177,178],{"label":13,"to":14,"description":15,"icon":16},{"label":18,"to":19,"description":20,"icon":21},{"label":23,"to":24,"description":25,"icon":26},{"label":28,"to":29,"description":30,"icon":31},{"label":33,"to":34,"description":35,"icon":36},{"label":38,"to":39,"description":40,"icon":41},{"label":43,"to":44,"description":45,"icon":46},{"label":48,"to":49,"description":50,"icon":51},{"label":53,"to":54,"description":55,"icon":56},{"label":58,"to":59,"icon":60,"nested":61},{"label":63,"to":64,"icon":65,"nested":10,"children":181},[182,183,184,185,186,187,188,189],{"label":68,"to":64,"description":69,"icon":70},{"label":72,"to":73,"description":74,"icon":75},{"label":77,"to":78,"description":79,"icon":80},{"label":82,"to":83,"description":84,"icon":85},{"label":87,"to":88,"description":89,"icon":90},{"label":92,"to":93,"description":94,"icon":31},{"label":96,"to":73,"description":97,"icon":46},{"label":99,"to":100,"description":101,"icon":102},{"label":104,"icon":105,"nested":10,"children":191},[192,193,194],{"label":108,"to":109,"icon":110,"description":111},{"label":113,"to":114,"icon":115,"description":116},{"label":118,"to":119,"description":120,"icon":46},{},{"id":197,"title":198,"body":199,"cta":206,"description":217,"extension":218,"faqs":219,"features":241,"hasMarkDownContent":61,"hero":268,"meta":272,"navigation":10,"path":19,"sections":273,"seo":329,"stem":330,"__hash__":331},"pages\u002Fproxy-vpn-detection.md","Proxy & VPN Detection API",{"type":200,"value":201,"toc":202},"minimark",[],{"title":203,"searchDepth":204,"depth":204,"links":205},"",2,[],{"title":207,"description":208,"links":209},"Start detecting proxies today","Get 1,000 free requests per month when you register.",[210],{"label":211,"to":212,"external":10,"target":213,"color":214,"size":215,"icon":216,"trailing":10},"Get API Key","\u002Faccount","_self","primary","lg","i-lucide-arrow-right","Accurately identify residential proxies, datacenter IPs, and commercial VPN networks.","md",[220,224,227,231,234,237],{"label":221,"content":222,"icon":223},"What is a residential proxy?","A residential proxy routes traffic through an actual residential internet connection, making the traffic appear as though it originates from a standard home user rather than a datacenter. These are heavily used by sophisticated scrapers and credential stuffing attacks.","i-lucide-help-circle",{"label":225,"content":226,"icon":21},"Can I block all proxies?","While possible, blocking all proxies may result in high false positives (e.g., blocking corporate proxies). We recommend introducing adaptive friction, such as requiring MFA or a CAPTCHA, instead of outright blocking.",{"label":228,"content":229,"icon":230},"How accurate is the VPN detection?","Our system combines real-time node databases, threat intelligence feeds, and ASN classification to accurately identify nodes belonging to commercial VPN networks like NordVPN, ExpressVPN, and others.","i-lucide-target",{"label":232,"content":233,"icon":41},"Does this API detect datacenter IPs?","Yes, the API returns an ASN classification field that explicitly flags IPs originating from hosting providers, datacenters, and cloud platforms like AWS or GCP.",{"label":235,"content":236,"icon":51},"Will proxy blocking hurt my SEO?","No. Our network API simultaneously checks if the IP belongs to a verified search engine bot. Legitimate crawlers like Googlebot are explicitly flagged, allowing you to bypass proxy rules for good bots.",{"label":238,"content":239,"icon":240},"How often do you update the proxy lists?","Our systems continuously aggregate data from global honeypots, public proxy lists, and threat intelligence feeds. Edge nodes receive updates asynchronously in near real-time.","i-lucide-refresh-cw",{"title":242,"description":243,"items":244},"Reliable Detection at Scale","Advanced analytics to stop automated abuse and credential stuffing.",[245,249,252,256,259,262,265],{"title":246,"description":247,"icon":248},"Millisecond Latency","Lookups perform in single-digit milliseconds, allowing inline blocking.","i-lucide-gauge",{"title":250,"description":251,"icon":16},"Comprehensive Coverage","Detects everything from public proxies to elite residential networks.",{"title":253,"description":254,"icon":255},"ASN Integration","Cross-references proxy status with BGP routing intelligence.","i-lucide-server-cog",{"title":257,"description":258,"icon":36},"Threat Scoring","Proxy detection feeds directly into our unified 0-100 threat score.",{"title":260,"description":261,"icon":240},"Continuous Updates","Our nodes constantly ingest new proxy lists from global honeypots.",{"title":263,"description":264,"icon":60},"Reduce Chargebacks","Flag high-risk transactions originating from anonymizing networks.",{"title":266,"description":267,"icon":31},"Enforce Compliance","Ensure geographic access restrictions cannot be bypassed with VPNs.",{"badge":269,"orientation":270,"json":271},"IP Intelligence","horizontal","{\n  \"ok\": true,\n  \"date\": \"2025-06-12T00:00:00Z\",\n  \"data\": {\n    \"ip\": \"104.28.12.34\",\n    \"proxy\": true,\n    \"vpn\": true,\n    \"threat_level\": 85,\n    \"is_known_bot\": false,\n    \"bot_details\": null,\n    \"is_tor_node\": false,\n    \"tor_details\": null,\n    \"asn\": {\n      \"asn_id\": \"13335\",\n      \"asn_name\": \"CLOUDFLARENET\",\n      \"classification\": \"hosting\",\n      \"route_visibility_count\": 5231\n    }\n  },\n  \"meta\": {\n    \"total_credits\": 10000,\n    \"credits_remaining\": 9999\n  }\n}\n",{},[274,292,311],{"title":18,"description":275,"orientation":270,"image":276,"features":279},"Stop fraudsters hiding behind anonymizing networks. The endpoint analyzes the incoming IP against a constantly updated database of known open proxies, SOCKS nodes, and HTTP proxies to reveal the true nature of the traffic.",{"src":277,"alt":278},"\u002Fproducts\u002Fproxy_vpn_1781163824981.png","Proxy Server and Network Security",[280,284,288],{"title":281,"description":282,"icon":283},"Real-time Database","Instantly checks against live databases of known proxy IPs.","i-lucide-database",{"title":285,"description":286,"icon":287},"Open Proxy Detection","Catch insecure and public proxies often used for low-sophistication attacks.","i-lucide-unlock",{"title":289,"description":290,"icon":291},"SOCKS & HTTP","Broad coverage across multiple proxy protocols and port configurations.","i-lucide-layers",{"title":293,"description":294,"orientation":270,"reverse":10,"image":295,"features":298},"Residential Proxy Intelligence","Attackers increasingly use compromised IoT devices and residential broadband connections to mask their attacks. Our intelligence layer identifies traffic acting as residential gateways for botnets and scrapers.",{"src":296,"alt":297},"\u002Fproducts\u002Fproxy_residential_abstract.png","Residential proxy intelligence abstract visualization",[299,303,307],{"title":300,"description":301,"icon":302},"Residential Flagging","Catch sophisticated botnets operating through standard ISP connections.","i-lucide-home",{"title":304,"description":305,"icon":306},"Abuse History","Correlate IPs with known spam and hacking blacklist databases.","i-lucide-history",{"title":308,"description":309,"icon":310},"Adaptive Friction","Force MFA or CAPTCHA challenges when residential proxy traffic is detected.","i-lucide-sliders",{"title":312,"description":313,"orientation":270,"image":314,"features":317},"Datacenter & Commercial VPN Flagging","Legitimate users rarely browse from AWS or DigitalOcean. Detect connections originating from cloud providers and accurately flag traffic from popular consumer VPN networks like NordVPN, ExpressVPN, and Surfshark.",{"src":315,"alt":316},"\u002Fproducts\u002Fproxy_datacenter_abstract.png","Datacenter and commercial VPN abstract visualization",[318,321,325],{"title":319,"description":320,"icon":41},"Hosting Classification","Identify traffic originating from datacenters and server farms.",{"title":322,"description":323,"icon":324},"Commercial VPN Flags","Accurately detect traffic from popular consumer VPN providers.","i-lucide-shield-check",{"title":326,"description":327,"icon":328},"Rule Flexibility","Choose to block datacenters while allowing consumer VPNs based on your risk profile.","i-lucide-settings",{"title":198,"description":217},"proxy-vpn-detection","40rz2Hyy_LZDlM3a1odFQlpsmv4T53fn7-8lIW3oKM8",1782044513435]