Know the source.
Trace an observed address to its provider and collection source. Inspect the history behind the current record.
Real IPs. Named infrastructure.
Get real exit IPs from proxy networks, with provider names, location and timestamped evidence. Public stresser and DDoS-for-hire IP intelligence is next.
Proxy networks LivePublic stressers PlannedDDoS-for-hire Planned
Launching soon. Join the list for public access updates.
From infrastructure to intelligence
41Total IPs analyzed
Proxy networks Collecting
Public stressersPlanned
DDoS-for-hirePlanned
nightsec
Observed
exit IP
exit IP
Latest observationproxy
122.168.87.100Froxy
Services we monitor
Froxy
Good intelligence.
Your choice of delivery.
Use the API for live lookups, or keep a local database current with the HTTP stream.
A little context.
One request.
Retrieve real proxy exit IPs, identify their providers and check approximate locations through one API.
- IPv4 and IPv6
- Single or batch lookups
- Timestamped observations
lookup.shHTTPS / JSON
# Look up an observed exit.
curl 'https://nightsec.io/v1/lookup/122.168.87.100' \
-H "Authorization: Bearer $NIGHTSEC_API_KEY"
# Current response · selected fields
{
"ip": "122.168.87.100",
"provider": "Froxy",
"location": null,
"last_seen": 1792883350.1252549
}Your infrastructure.
Your lookup.
Keep a local copy of the dataset and query it inside your application, without a network round trip.
- MaxMind-format databases
- Immutable, versioned releases
- SHA256 checksums
lookup.pyPYTHON / MMDB
import maxminddb
# Download and verify your snapshot first.
with maxminddb.open_database(
"iplens.mmdb"
) as database:
result = database.get(
"122.168.87.100"
)
print(result)
# Save the snapshot cursor to follow changes.Every change.
From where you left off.
Apply new observations and removals to your local copy. Reconnect using your last saved event ID.
- Server-sent events over HTTP
- Updates and removal events
- Durable resume cursors
stream.shHTTP / SSE
# Resume after your last applied event.
curl -N 'https://nightsec.io/v1/stream' \
-H "Authorization: Bearer $NIGHTSEC_API_KEY" \
-H "Last-Event-ID: 42"
# Event shape · example, not a live event
id: <event_id>
event: upsert
data: {"operation":"upsert","data":{…}}
# Checkpoint after applying each event.Locate the observed exit.
Country, region, city and approximate coordinates from IP2Location LITE, with the source and database date exposed. Proxy sightings retain their own timestamps.
Know what’s unknown.
Confidence is an evidence score. An unobserved IP stays unknown, giving your team context for its own decisions.
Less noise. More context.