Proxy detection API

Most automated abuse runs through rented infrastructure: proxy pools, cloud servers and hosting networks. Fraudex tells you, per IP, whether a request comes from one of those networks, so you can stop scrapers, credential stuffing and card testing at the door.

See plans IP checker API docs

Where proxy traffic comes from

Attackers need lots of IP addresses so they can stay under your rate limits. The cheap way to get them is to rent: proxy services sold by the gigabyte, virtual servers at cloud providers, and hosting ranges that change hands constantly. Real customers almost never browse from any of these.

That difference is the signal. A login attempt from a home broadband or mobile network is probably a person. A burst of logins from hosting and proxy networks is almost never your customers.

What the API checks

Fraudex matches every IP against a list of more than 740 networks run by proxy services, VPN providers, hosting companies and bot operators, plus the live Tor exit list. You get one clear verdict, is_bot, along with the network (asn, as_name) and country_code, so you can write rules per network as well.

See exactly which networks are flagged in the ASN directory.

Where to put the check

  • Login. Add a second factor or CAPTCHA for logins from proxy networks, and rate-limit by network so proxy rotation doesn't reset the count. More in credential stuffing at the login form.
  • Sign-up. Require email verification for new accounts from proxy and hosting networks.
  • Checkout. Screen before you authorise the card to cut chargebacks.
  • Your own API. Give callers on proxy networks a tighter limit. See protecting your API from scraping.

Honest about residential proxies

Some proxy services route through real home connections. Those IPs belong to ordinary ISPs, and no IP-only check can flag them reliably without also flagging real customers. Fraudex doesn't pretend otherwise. Catch the datacenter and hosting proxies with the network check, which covers most automated traffic, and watch behaviour (many accounts or cards from one source, machine-speed requests) for the rest.

Questions

Is a datacenter IP always a proxy?

Not always: your own servers and some business tools call from datacenters too. That is why Fraudex reports the network as well as the verdict, so you can allow known partners and still challenge everyone else from hosting ranges.

Can I check proxies and card BINs together?

Yes. The IP + BIN plan ($70 for 30 days) adds unlimited BIN lookups on the same API key, so you can screen the connection and the card in one checkout step. See the BIN lookup API.

Is there a free trial?

You can run 3 free checks a day with the IP checker. Paid plans start at $40 for 30 days of unlimited lookups.

See plans