Can I run more than one?

Yes. Add each property as a site in the dashboard; every site keeps its own traffic view and policy.

How is it different from fail2ban or CrowdSec?

fail2ban and CrowdSec ban an IP after it misbehaves in your logs or once others report it. IPScanner classifies each new visitor before the request reaches your app, so a first visit from Tor, a VPN or a scripted browser can already be stopped.

Do they cost the same?

The Worker, the proxy integrations and the plugin all use 2 requests per new visitor, then cache the verdict for 10 minutes.

What does the free plan include?

30,000 requests a month, up to 1,000 a day. On Free, sites run in monitor mode; blocking starts on Starter.

IPScanner

Products

IP DetectionVPN, proxy, Tor and hosting checks on any IP AgentscanTell humans, bots and AI agents apart ProvenanceLocation checks with a tamper-evident audit log

Integrations

Cloudflare Worker WordPress plugin Traefik plugin Caddy module nginx, Apache, HAProxy Form gate MCP server All integrations

Detection servicesVPN Detection Proxy Detection Geolocation ASN Data WHOIS Info

Integrations

Bot and VPN blocking integrations

One engine and one site policy. Put it at the edge, in your proxy, in WordPress or in your code.

Get a free API key Browse integrations

Starts in monitor modeFails open after 1.5 s

Edge

Cloudflare Worker

Proxy

Traefik
Caddy
nginx

CMS

WordPress plugin

Code

All integrations

Pick where it runs

Closer to the visitor is better. One free account covers all of them.

At the edge

Cloudflare Worker
Deploys from a button and checks visitors before they reach your origin.
Docs

Your proxy

Traefik
A middleware plugin you add to any router, Coolify included.
Docs
Caddy
A module with its own Caddyfile directive, built in with xcaddy.
Docs
nginx, Apache, HAProxy
One small container your proxy asks first. Works with Nginx Proxy Manager.
Docs

Your CMS

WordPress plugin
Guards logins, sign-ups, comments, WooCommerce checkout and contact forms.
Docs

Your forms

Form gate
One script tag on your form, one verify call on your server.
Docs

Your code

SDKs in six languages
Node.js, Python, Go, PHP, Ruby and Rust.
Docs
REST API
Any check as a plain HTTPS call, with cURL examples.
Docs

Your AI tools

MCP server
Lets Claude, Cursor or VS Code look up IPs and verify crawlers.
Docs

Sites dashboard

Same policy everywhere

Allow, flag or block each traffic class once. The Worker, the proxies, the plugin and the form gate all follow it, with no redeploy.

New sites start in monitor mode and block nothing.
Verified search and AI crawlers always pass.
If IPScanner is slow or down, visitors get through.

shop.example.comPolicy

HumanAllow
Verified botAllow
AI agentFlag
VPNFlag
TorBlock
Malicious automationBlock

Followed by

Questions

Integrations FAQ

The one closest to your visitors. Behind Cloudflare, the Worker. On your own server, the integration for your proxy. On WordPress without either, the plugin.

Pick one and start in monitor mode

Create a key, add a site, read a week of traffic, then block.

Get a free API key Read the docs