Bot Detection for
Education & EdTech

import requests

def verify_exam_session(student_ip, student_id):
    """
    Check IP risk before allowing exam access.
    Flag VPN/proxy use for proctor review.
    """
    resp = requests.get(
        f"https://api.ipasis.com/v1/ip/{student_ip}",
        headers={"Authorization": "Bearer YOUR_API_KEY"},
        timeout=2,
    )
    data = resp.json()

    result = {
        "allowed": True,
        "flags": [],
        "risk_score": data.get("risk_score", 0),
    }

    # Flag VPN/proxy — potential cheating
    if data.get("is_vpn") or data.get("is_proxy"):
        result["flags"].append("vpn_or_proxy")
        result["requires_review"] = True

    # Block Tor — almost always cheating
    if data.get("is_tor"):
        result["allowed"] = False
        result["flags"].append("tor_exit_node")

    # Block datacenter IPs — not a real student
    if data.get("is_datacenter"):
        result["allowed"] = False
        result["flags"].append("datacenter_ip")

    # High risk score — suspicious
    if data.get("risk_score", 0) >= 80:
        result["flags"].append("high_risk")
        result["requires_review"] = True

    # Compare against student's usual country
    result["country"] = data.get("country_code")
    result["city"] = data.get("city")

    return result


# Usage during exam start
session = verify_exam_session(
    student_ip="203.0.113.45",
    student_id="STU-2026-4821"
)

if not session["allowed"]:
    # Block exam access, notify proctor
    notify_proctor(session)
elif session.get("requires_review"):
    # Allow but flag for proctor attention
    flag_for_review(session)