Bot Detection for
Media & Publishing

Code Example: Pre-Ad Risk Check

// Node.js — Check IP risk before serving ads
const express = require('express');
const app = express();

async function getIpRisk(ip) {
  const cached = await redis.get(`ipasis:${ip}`);
  if (cached) return JSON.parse(cached);

  const res = await fetch(`https://api.ipasis.com/v1/ip/${ip}`, {
    headers: { 'Authorization': `Bearer ${process.env.IPASIS_API_KEY}` }
  });
  const data = await res.json();
  await redis.setex(`ipasis:${ip}`, 3600, JSON.stringify(data));
  return data;
}

// Middleware: classify traffic before ad serving
app.use('/article/*', async (req, res, next) => {
  const risk = await getIpRisk(req.ip);

  // Pass risk signals to ad rendering logic
  req.adConfig = {
    serveAds: risk.risk_score < 60,        // Suppress ads for bots
    adTier: risk.risk_score < 30 ? 'premium' : 'remnant',
    ivtFlag: risk.is_datacenter || risk.is_proxy,
    riskScore: risk.risk_score,
  };

  // Log IVT for MRC compliance
  if (risk.risk_score >= 40) {
    logger.warn('IVT detected', {
      ip: req.ip,
      score: risk.risk_score,
      type: risk.is_datacenter ? 'GIVT' : 'SIVT',
      country: risk.country_code,
      asn: risk.asn,
    });
  }

  next();
});