Is this IP a proxy?
Use the Nightsec API to check an IP against observed proxy exits. A match returns its provider, classification, and first and last observation times.
Public API access opens at launch. Get launch updates.
How to check if an IP is a proxy
Send an IPv4 or IPv6 address to the proxy IP lookup API. Use a single lookup for one address or a batch request for up to 100.
curl --fail-with-body 'https://nightsec.io/v1/lookup/203.0.113.42' \
-H "Authorization: Bearer $NIGHTSEC_API_KEY"Example response. The address and provider are illustrative.
{
"classification": "proxy",
"first_seen": 1792800000.0,
"found": true,
"ip": "203.0.113.42",
"last_seen": 1792886400.0,
"provider": "Example Proxy"
}found: true means Nightsec has a current observation of that proxy exit. found: false means no current record; it does not prove the address is not a proxy.
Identify the proxy provider
Each matching record names the provider through which Nightsec observed the exit IP. This identifies the proxy network, not the person using it. See the response fields and coverage rules.
Track proxy IP changes
First and last observation times show when Nightsec saw an exit. For local lookups, download a database snapshot and store stream updates and removals in a separate overlay.
Current coverage is proxy networks. VPNs, public stressers and DDoS-for-hire services are not included.