Nightsec API v1
Data reference
A record describes an observed exit IP and the proxy provider used to reach it. Lookups return active records seen within the last 30 days.
Lookup fields
| Field | Type | Description |
|---|---|---|
ip | string | IPv4 or IPv6 address. |
found | boolean | Whether the lookup found a current record. Included in lookup responses. |
provider | string | Provider associated with the most recent observation. |
classification | string | Network category. Current collection covers proxy services. |
first_seen | number | First observation, as Unix seconds UTC. |
last_seen | number | Most recent observation, as Unix seconds UTC. |
Snapshots and events
New database releases and event data objects contain ip, provider, classification, first_seen and last_seen. The found flag belongs to lookup responses only.
Previously published snapshots remain unchanged and may contain additional legacy fields.
Coverage
An address missing from the dataset may still be a proxy. Current coverage excludes VPN services, public stressers and DDoS-for-hire services.