Spamhaus DROP

DROP (Don't Route Or Peer) is published by Spamhaus and lists address ranges that are believed to be hijacked, leased to spam operations, or otherwise criminal.

It is not a residential-proxy signal, but it is a real risk signal that cheap tools often skip. A hit should raise the risk score rather than block the user outright.

The list changes daily; store it with a timestamp and refresh automatically.