VPN & Proxy Detection Database

prepare(
        "SELECT provider, type, country, risk_level, is_residential
         FROM vpn_ips
         WHERE ip_start <= INET6_ATON(:ip)
           AND ip_end   >= INET6_ATON(:ip)
         LIMIT 1"
    );
    $stmt->execute(['ip' => $ip]);
    return $stmt->fetch(PDO::FETCH_ASSOC) ?: null;
}

// Usage in your registration or checkout flow
$ip = $_SERVER['REMOTE_ADDR'];
$result = check_vpn($pdo, $ip);

if ($result) {
    // IP matched - decide what to do
    if ($result['risk_level'] === 'critical') {
        http_response_code(403);
        exit('Access denied.');
    }
    if ($result['is_residential']) {
        // Residential proxy - higher risk, may want extra verification
        require_captcha();
    }
    // Log for review
    log_threat('vpn_detected', $ip, $result);
}

import sqlite3
import ipaddress

# Load the AntiProxies CSV into SQLite on first run
# Then query locally - no network calls needed

def check_vpn(db_path: str, ip: str) -> dict | None:
    """Check if an IP belongs to a known VPN or proxy."""
    conn = sqlite3.connect(db_path)
    conn.row_factory = sqlite3.Row
    ip_int = int(ipaddress.ip_address(ip))

    row = conn.execute(
        """SELECT provider, type, country, risk_level, is_residential
           FROM vpn_ips
           WHERE ip_start <= ? AND ip_end >= ?
           LIMIT 1""",
        (ip_int, ip_int)
    ).fetchone()

    conn.close()
    return dict(row) if row else None

# Example: check during user registration
result = check_vpn("antiproxies_vpn.db", request.remote_addr)
if result and result["risk_level"] in ("high", "critical"):
    abort(403, "Suspicious connection detected.")