Bot Detection for
Travel & Hospitality

import requests

def check_booking_risk(ip_address):
    """Gate bookings with IP intelligence."""
    resp = requests.get(
        f"https://api.ipasis.com/check?ip={ip_address}",
        headers={"X-API-Key": API_KEY}
    ).json()

    if resp["is_datacenter"] or resp["is_proxy"]:
        # Scraper or seat-spinner — block search
        return {"action": "block", "reason": "automated"}

    if resp["trust_score"] < 40:
        # High risk — require phone verification
        return {"action": "verify", "reason": "low_trust"}

    if resp["is_vpn"] and resp["trust_score"] < 60:
        # VPN + medium risk — show limited results
        return {"action": "limit", "reason": "geo_mismatch"}

    # Clean traveler — full access
    return {"action": "allow"}

# In your search/booking endpoint:
risk = check_booking_risk(request.remote_addr)
if risk["action"] == "block":
    return jsonify(error="Access denied"), 403