IP type check: country, ISP and ASN, whether the address is a known Tor exit (Tor Project's public list), a proxy or VPN and a hosting/datacenter address (ip-api.com flags), and a LOW/MEDIUM/HIGH level from those flags. It is not a threat score: no abuse-report or spam history is included. ip-api's free tier is for non-commercial use only.