IP Intelligence Overview¶
The Preads Platform features a high-performance, multi-provider IP Intelligence engine. By aggregating data from the world's leading fraud intelligence networks, the platform provides real-time auditing of user infrastructure, identifying high-risk connection types before they can impact your network's integrity.
🏛️ Unified Provider Architecture¶
The platform standardizes disparate data formats from multiple providers into a unified internal schema, ensuring consistent risk assessment regardless of the underlying data source.
Standardized Signals¶
Every IP analysis result includes the following core audit flags:
is_vpn: Identification of virtual private network tunnels.is_proxy: Detection of HTTP/SOCKS/Elite proxies.is_tor: Real-time identification of TOR exit node signatures.is_datacenter: Detection of hosting providers, clouds, and non-residential IP ranges.risk_score: A normalized 0-100 score indicating the overall fraud probability.
🔗 Chaining & Fallback Logic¶
The IpIntelligenceService implements a prioritized "Smart Chain". If the primary provider is disabled or fails due to rate limits/timeouts, the system automatically cascades to the next available provider in the sequence.
Default Priority Chain¶
- IPQualityScore (Recommended Primary)
- AbuseIPDB (Reputation Specialist)
- IPHub (VPN/Proxy Specialist)
- ProxyCheck (Reliable Backup)
- MaxMind GeoIP2 (Enterprise Cloud or Local DB)
- IPInfo.io (Geolocation Specialist)
📑 Supported Providers Detail¶
| Provider | Core Strength | Integration Type |
|---|---|---|
| IPQualityScore | Comprehensive fraud scoring & bot detection | API-based |
| AbuseIPDB | Community-driven abuse reputation history | API-based |
| IPHub | High-accuracy VPN and datacenter identification | API-based |
| ProxyCheck | Cost-effective VPN detection with high free limits | API-based |
| MaxMind | Industry-standard geolocation and anonymity data | API & Local DB |
| IPInfo.io | High-volume geolocation and privacy info | API-based |
⚡ Performance & Caching¶
To ensure sub-millisecond response times and minimize API operational costs, the platform utilizes a robust database caching layer.
- Database Caching: Every unique IP lookup is stored in the
ip_intelligencetable. - Configurable TTL: Administrators can set the Cache Time-To-Live (default: 24 hours) via the Admin Panel.
- Bypass Whitelist: Known corporate IPs or trusted partners can be whitelisted to bypass the intelligence engine entirely, saving API credits.
🛠️ Configuration & Management¶
Providers are managed via a centralized dashboard at Admin → Security → Anti-Cheat → API Keys.
- Individual Activation: Toggle providers on/off based on your current subscription status or network requirements.
- Credential Sandboxing: Use the built-in Test API tool to verify connectivity for each provider without generating live traffic scores.
- Dual-Mode MaxMind: Configure MaxMind to use either the GeoIP2 Web Service for the latest data or a Local .mmdb Database for unlimited queries and maximum performance.