ip.vpn_provider
The address is inside a known commercial VPN range.
What it looks at#
Looks up the address against a list of network ranges owned by VPN providers, built from the
open-source X4BNet/lists_vpn project (MIT licence), which derives them from known VPN
netblocks and from ASNs owned by VPN operators. The list names no individual providers, so
the finding says only that the range is a VPN’s.
The list is not complete, and it is refreshed with each deploy. A VPN that rents addresses
inside a general-purpose hosting range is more likely to show up as ip.hosting_provider.
Why it matters#
VPNs are mostly a privacy tool for ordinary people. They are also what bulk signups rent to rotate addresses and dodge per-IP limits. On its own the address class is weak evidence.
What to do#
Low severity: do not block on it. Combine it with the other signals on the same signup, and consider asking for an extra confirmation step rather than refusing the signup.