VPN detection guides

Practical, vendor-neutral guides for fraud teams, ad-ops, support, and developers. Copy-paste code samples and decision frameworks — no marketing fluff.

How to detect VPN users on your website
Implementation walkthrough with copy-paste code in Node.js, Python, Go, PHP, and Cloudflare Workers. Server-side, edge, and client-side patterns.
How to block VPN, proxy, and Tor traffic
Production-tested rules for Cloudflare WAF, Nginx, Caddy, and Stripe Radar. Includes the exact ASN list, false-positive playbook, and step-up alternatives to hard blocks.
Why is my IP flagged as a VPN?
Twelve real-world reasons your IP shows as a VPN/proxy when you're not on one — CGNAT, mobile carriers, iCloud Private Relay, Cloudflare WARP, residential proxies running on neighbour devices, and how to dispute.
Residential vs datacenter IPs — how to tell the difference
What residential proxy traffic actually looks like to a server, why ASN classification alone isn't enough, and the additional signals (peer count, BGP single-homing, RTT) that separate the two.