Detect Bots on Login & Stop Credential Stuffing

// Backend login handler (Node.js/Express example)
import axios from 'axios';
import bcrypt from 'bcrypt';

app.post('/api/login', async (req, res) => {
  const { email, password } = req.body;
  const userIP = req.ip;

  try {
    // Check IP with IPASIS BEFORE database lookup
    const ipasisResponse = await axios.post('https://api.ipasis.com/check', {
      ip: userIP,
      email: email  // Optional: also validate email
    }, {
      headers: {
        'Authorization': `Bearer ${process.env.IPASIS_API_KEY}`,
        'Content-Type': 'application/json'
      }
    });

    const { trustScore, signals } = ipasisResponse.data;

    // Block high-risk login attempts immediately
    if (trustScore < 30) {
      await logBlockedLogin({ email, ip: userIP, trustScore, signals });
      return res.status(403).json({
        error: 'Login blocked',
        message: 'Suspicious activity detected. Please contact support.'
      });
    }

    // Require 2FA/CAPTCHA for moderate risk (30-60)
    if (trustScore < 60) {
      // Implement additional verification
      return res.status(401).json({
        error: 'additional_verification_required',
        message: 'Please complete additional verification',
        requiresCaptcha: true
      });
    }

    // Proceed with normal login flow for trusted IPs (60+)
    const user = await getUserByEmail(email);
    
    if (!user) {
      return res.status(401).json({ error: 'Invalid credentials' });
    }

    const passwordMatch = await bcrypt.compare(password, user.passwordHash);
    
    if (!passwordMatch) {
      await logFailedLogin({ email, ip: userIP, trustScore });
      return res.status(401).json({ error: 'Invalid credentials' });
    }

    // Generate session token
    const token = generateAuthToken(user.id);
    
    res.json({ 
      success: true, 
      token,
      userId: user.id 
    });

  } catch (error) {
    console.error('IPASIS check failed:', error);
    // Fallback: proceed with normal login but log for review
    // (Your existing login logic here)
  }
});