Implement IP_Intelligence_and_VPN_Detection

.env.example

@@ -100,3 +100,41 @@ GLOBAL_STATS_INITIAL_DELAY=5000
 
 # Predictive Churn Analysis Configuration
 CHURN_ANALYSIS_INTERVAL=3600000
+
+# IP Intelligence and VPN Detection Configuration
+IP_INTELLIGENCE_ENABLED=false
+
+# IP Intelligence Providers (enable at least one for production)
+IPINFO_ENABLED=false
+IPINFO_API_KEY=your-ipinfo-api-key
+IPINFO_TIMEOUT=5000
+
+MAXMIND_ENABLED=false
+MAXMIND_API_KEY=your-maxmind-api-key
+MAXMIND_TIMEOUT=5000
+
+ABUSEIPDB_ENABLED=false
+ABUSEIPDB_API_KEY=your-abuseipdb-api-key
+ABUSEIPDB_TIMEOUT=5000
+
+IPQUALITYSCORE_ENABLED=false
+IPQUALITYSCORE_API_KEY=your-ipqualityscore-api-key
+IPQUALITYSCORE_TIMEOUT=5000
+
+# IP Risk Thresholds (0-100 scale)
+IP_RISK_THRESHOLD_LOW=30
+IP_RISK_THRESHOLD_MEDIUM=60
+IP_RISK_THRESHOLD_HIGH=80
+IP_RISK_THRESHOLD_CRITICAL=90
+
+# IP Intelligence Cache Configuration
+IP_CACHE_ENABLED=true
+IP_CACHE_TTL_MS=3600000
+IP_CACHE_MAX_SIZE=10000
+
+# IP Intelligence Rate Limiting
+IP_RATE_LIMIT_PER_MINUTE=100
+IP_RATE_LIMIT_BURST=20
+
+# Security Alert Configuration
+SECURITY_ALERT_EMAIL=security@yourdomain.com