VPN detection and IP geolocation

Advanced VPN and proxy detection beyond IP lists. Use latency triangulation and browser, locale, and location mismatches to uncover disguised connections.

Connection intelligence VPN detected
Approximate IP locations
VPN detected in London, United Kingdom. IP locations are approximate. NORTH ATLANTIC New York Browser timezone Location mismatch LondonVPN exit · GB203.0.113.82

IP location

London, GB

IP address

203.0.113.82

Advanced detection and triangulation

The most advanced VPN and proxy detection

Detect VPNs and proxies beyond known IP lists. Rupt measures latency and cross-checks location, browser and locale signals to expose connections that misrepresent where they come from.

Connection analysis
Connection analysis LatencyBrowserLocation

Location checked against measured latency.

Correlate ping timing with IP location, browser timezone and locale.

01 Latency

Latency-based triangulation

Rupt sends pings and measures response latency to check whether a connection’s timing is consistent with its reported location. These measurements help reveal VPN and proxy routing beyond known IP lists.

Ping measurementsResponse latency
02 Browser

Browser and locale mismatches

Compare browser timezone and locale signals with the connection’s reported location. Evaluate differences alongside the location and timing evidence to identify inconsistencies.

Browser timezoneLocale signals
03 Location

Proxy detection beyond blocklists

Combine IP geolocation, latency and browser signals to identify connections that misrepresent location, including proxy traffic from addresses that have not appeared on a blocklist.

IP geolocationLocation consistency

VPN detection and IP geolocation

See beyond the IP address.

See how Rupt detects VPNs, proxies, and location mismatches with latency triangulation and browser signals. Walk through the results with our team.

Book a demo
See beyond the IP address A dimensional dotted globe connects a VPN exit and browser signals to a network lens. Pings and responses support a latency cross-check, while a browser locale mismatch is highlighted. VPN exit London, GB Browser locale US settings Location mismatch Latency check Ping Response Compare the connection signals

Location and network signals

IP geolocation and connection intelligence

Identify the IP’s approximate city, region and country, and whether the connection uses a VPN, proxy, Tor or hosting network. Apply regional access rules and choose how to handle anonymized traffic.

VPNProxyTorHosting
IP location
EUROPE London England · GB
Country
United Kingdom
Region
England
City
London
Connection type
VPN detected

01

Geofencing and regional access

Use the IP country to define where your product, content or transactions are available. Combine location with network signals when regional access needs additional verification.

02

Network classification

Distinguish VPN, proxy, Tor and hosting signals. Apply different policies to anonymized connections and cloud traffic, with responses that fit your product and customers.

03

Location consistency

Cross-check reported location with latency, browser timezone and locale signals. Identify connections that may be disguising their location before granting access to a restricted region or action.

Detection to decision

Handle VPN traffic
on your terms.

Allow a familiar customer, verify an unfamiliar login, or enforce country restrictions. Connect detection results to your rules.

Meet the rules engine
Policy previewExample policy

Keep the familiar customer moving.

A customer opens your product on a device you recognize, through their usual privacy VPN. Your policy can allow the session and preserve the network evidence.

Network

VPN

Device

Recognized device

ifip_is_vpntrue
andis_new_fingerprintfalse

Allow

The customer carries on.

Applications

VPN detection and IP geolocation use cases

Use VPN and IP location signals for geofencing, account takeover protection, account sharing, and fraud ring detection.

Geofencing

Apply country rules using IP location, then add VPN and proxy signals when a connection needs closer scrutiny.

Explore policies

Account takeover

Combine VPN and device signals to verify unfamiliar logins before they reach a customer’s account.

Explore protection

Account sharing

Recognize devices when IPs change, then review account history for signs of possible shared access.

Explore sharing

Fraud ring detection

Link accounts through shared devices and networks, then use VPN and proxy evidence to review coordinated abuse.

Explore linked accounts

A closer look

Good questions. Clear answers.

VPN detection and IP geolocation

Detect the connections IP lists miss.

See how advanced VPN and proxy detection fits your product. Explore your connections, location requirements, and access policies with our team.