Proxy Detection Web Service

The proxy detection web service provides proxy-related information about IP addresses via an HTTP-based API.

Release Notes

Changes to the proxy detection web service are documented in our release notes.

Device Tracking Add-on

You may optionally include in your site some JavaScript that helps us identify the device your customer is using to determine whether it has been used in previous fraudulent transactions. The device information passed to MaxMind via the Device Tracking Add-on is factored into the proxyScore returned when you query the HTTP API.

HTTP-based API

This web service uses the same hostnames as our minFraud web service. Its URI is https://minfraud.maxmind.com/app/ipauth_http

The minfraud.maxmind.com hostname automatically picks the data center geographically closest to you. In some cases, this data center may not be the one that provides you with the best service. You can explicitly try the minfraud-us-east.maxmind.com and minfraud-us-west.maxmind.com hostnames to see which one provides the best performance for you.

The API requires you to pass a set of parameters as an HTTP GET or POST. Results are returned in a simple text format documented below.

The two parameters that this service takes are the IP address to look up and your MaxMind license key.

The parameters should be passed in a query string or as a form post (application/x-www-form-urlencoded). The IP address parameter should be named i (lower case "I") and the license key should be named l (lower case "L").

The IP address should be passed as a string like "44.55.66.77".

Output

This service returns data as a set of comma-separated fields. The individual fields are not escaped or quoted, but they will never contain a comma.

All strings are returned as ASCII.

Name Type (length)
proxyScore decimal A score from 0.00-4.00 indicating the likelihood that the user's IP address is an anonymous proxy, open proxy, or VPN.
proxyScore Likelihood of fraud
0.5 15%
1.0 30%
2.0 60%
3.0+ 90%
A proxyScore of 0.00 will be returned for a corporate proxy or private IP and an empty string will be returned for an invalid IP.
err enum

If there was an error or warning with this request, this field contains an error code string.

The possible error codes are:

  • LICENSE_REQUIRED – you must provide a license key.
  • MAX_REQUESTS_REACHED – this error will be returned if your account is out of queries or if an invalid license key is provided.

Client Code Examples

Below are some sample clients for this web service.

Perl

Python

PHP

ASP