Stop fake signups
from VPNs & datacenters
- 1-minute setup, one endpoint
- VPN, proxy, Tor & datacenter detection
- Real home & mobile users get through
Why maintain your own IP blocklists?
Doing it yourself
- Scrape and merge lists by hand
- Stale ranges cause false positives
- Hours lost chasing new VPN hosts
- No idea why an IP was flagged
- IPv6 is an afterthought
- Broad lists end up blocking real users
DetectProxy
- One API call per lookup
- VPN, proxy & datacenter in one answer
- Maintained, regularly updated dataset
- Network, ASN & country for every IP
- Leaves regular home & mobile users alone
- IPv4 and IPv6, same endpoint
Fake trials, card testing and scraping mostly come from datacenter and VPN addresses. One lookup at signup lets you block, challenge or flag them before they cost you anything.
Signup fraud
The most common use case
Real users in. Risky traffic flagged.
Every visitor gets one lookup. Home and mobile users pass straight through, while VPNs, proxies, Tor and servers get flagged, so your app can block, challenge or review them.
Illustration: visitors on home Wi-Fi and mobile networks pass through DetectProxy to your app, while VPN, proxy, Tor and server traffic is flagged so your app can decide what to do.
Illustration. DetectProxy flags each visitor; your code decides whether to block, challenge or review.
One request in, one verdict out
-
Subscribe on RapidAPI and copy your key. The free plan needs no credit card.
Free plan includedUpgrade any time -
A single GET request with the IP you want to check — from your signup, checkout or login handler.
Plain REST, any languageIPv4 and IPv6 -
You get a classification, a suggested policy, and the network, ASN and country behind the IP — so you decide what to do with it.
VPN/proxy & Tor, datacenter & cloud, attack, spam, malwareBlock / allow policyNetwork, ASN & country, plus the VPN service when known -
Act on the result in your own code: reject the signup, ask for extra verification, or just flag the account for review.
Signup & trial abuseAd & click fraudAccount sharing & scraping
# Subscribe on RapidAPI,
# then copy your key
# from the dashboard
X-RapidAPI-Key: YOUR_API_KEY# Look up one IP
HOST=vpn-proxy-datacenter-detection-api1.p.rapidapi.com
KEY=YOUR_API_KEY
curl -G "https://$HOST/v1/check" \
-d ip=191.101.242.5 \
-H "X-RapidAPI-Key: $KEY" \
-H "X-RapidAPI-Host: $HOST"{
"ip": "191.101.242.5",
"classification": "datacenter",
"policy": "block",
"network": "Voxility LLC",
"asn": 3223,
"country": "US"
}const verdict = await check(ip)
if (verdict.policy === "block") {
// or reject(), or review()
return challenge(user)
}Wire it into your signup handler once and it runs on every new account. No lists to update, no cron jobs to babysit.
Set it and forget it
Ad & click fraud too
What you get back
Two real lookups: a Tor exit and Google's public DNS.
See it in action
# a Tor exit
GET /v1/check?ip=185.220.101.1
{
"classification": "vpn_proxy",
"policy": "block",
"vpn_provider": "Tor",
"asn": 60729,
"country": "DE"
}# an ordinary IP
GET /v1/check?ip=8.8.8.8
{
"classification": "clean",
"policy": "allow",
"network": "Google LLC",
"asn": 15169,
"country": "US"
}The dataset is maintained and updated regularly, so you are not stuck babysitting stale lists.
Maintained data
Regularly updated
Are you on a VPN right now?
Scan your own connection with the same lookup your app would make. Only your IP is checked, once, when you click.
- IP address
- Network
- ASN
- Country
- Result
The browser checks run on your device and aren't part of the API.
Simple pricing. Hard caps, no surprise bills.
Need more volume or an SLA? Talk to us about Enterprise.
FAQ
Frequently Asked Questions
-
VPN and proxy servers, including Tor exits (with the service name when known); datacenter and cloud ranges, including AWS, Google Cloud, Azure and major hosting providers; and ranges with known attack, spam or malware activity, plus reserved address space. Every answer also includes the network, ASN and country when known. Anything not in the dataset comes back as
clean. -
No. Many datacenter IPs are just ordinary servers, and plenty of VPN traffic isn't on datacenter ranges at all. That's why each response gives you a classification and a suggested policy — you pick the rule that fits your product (for example, block datacenter IPs at signup but allow them for API traffic).
-
No. Residential and mobile proxies run on normal ISP addresses, so they aren't covered. DetectProxy focuses on VPN, proxy, Tor and datacenter networks and known abusive ranges.
-
It's built not to. Ordinary home and mobile connections come back
cleanunless that address is on a known abuse list, and we never flag a whole home internet provider just because a few proxies were seen on it. Verified search-engine crawlers (Google, Bing, Apple) always come back asallow, so your pages stay indexed. No IP data is perfect, so for high-value actions like checkout you can send flagged visitors to a CAPTCHA or manual review instead of a hard block. -
The IP isn't in our dataset. It's not a guarantee the address is safe — only that it isn't a known VPN, proxy, datacenter or abusive range. You still get its network, ASN and country.
-
Yes. IPv4 and IPv6 use the same endpoint.
-
Subscribe to a plan on RapidAPI and your key is available right away. The free plan doesn't need a credit card.
-
The dataset is maintained and updated regularly.
-
No. DetectProxy is a lookup API — you send an IP and get a verdict back. There's no bulk export.
-
Requests return HTTP 429 until your daily quota resets or you upgrade. Plans are hard-capped, so there are no surprise overage charges.
-
Don't — call the API from your backend so your key stays private. Anything in frontend JavaScript can be read by your visitors.
Stop fake signups before they cost you
Let one API call decide which IPs get in. Free plan, no credit card, one-minute setup.
Get DetectProxy