Operators and lessors
Who runs, sells and leases an address, prefix or ASN. Privacy relays and corporate gateways are named free; every other name is on the paid API.
Attribution names the companies behind address space: the operators that run or sell proxies, VPNs, Tor, privacy relays and corporate gateways on it, and the lessors and brokers it is leased_from.
| Answer | Operators | Lessors |
|---|---|---|
| Address | privacy.operators[] | privacy.leased_from[] |
| Prefix, ASN | operators[] | leased_from[] |
What each tier names
| Names | Open | Paid |
|---|---|---|
Privacy relays: group relay (iCloud Private Relay, Cloudflare WARP) | Yes | Yes |
Corporate gateways: group corporate_proxy (Zscaler, Netskope, Cisco Umbrella and others) | Yes | Yes |
Proxy, VPN and Tor operators: group proxy, vpn, tor | No | Yes |
Lessors and brokers: every leased_from name | No | Yes |
An entry is the same on both tiers.
Examples
An address answer (paid, GET /v1/104.164.205.119):
"privacy": {
"operators": [
{ "name": "ProxyLine", "kind": "proxy-seller", "group": "proxy", "role": "operator" }
],
"leased_from": [{ "name": "EGIHosting", "kind": "lessor" }]
}A prefix or ASN answer counts each company's addresses (open, GET /open/AS13335):
"operators": [
{ "name": "Cloudflare WARP", "kind": "relay", "group": "relay", "addresses": 383466 },
{ "name": "iCloud Private Relay", "kind": "relay", "group": "relay", "addresses": 23081 }
]Fields
| Field | In | Description |
|---|---|---|
name | All | The company's name. |
kind | All | What the company is. See below. |
group | operators | Which family it belongs to: proxy, vpn, tor, relay or corporate_proxy. |
role | Address operators | operator (runs the address space) or seller (sells access to it without running it). |
parent | Address answers | The parent company, when there is one (for example Kape Technologies). |
addresses | Prefix and ASN answers | How many of the prefix's or ASN's addresses the company has. |
operators and leased_from are separate lists, never merged. A lessor leases the space out. It is never named as the one running the proxies on it.
kind
| Value | Description |
|---|---|
proxy-seller | Sells proxy access to customers. |
proxy-operator | Registers and runs address blocks for proxy sellers. |
vpn | A commercial VPN service. |
tor | The Tor network. |
relay | A browser's or operating system's privacy relay. |
swg | A secure web gateway vendor (corporate gateway). |
lessor | In leased_from. A registry member leasing its own blocks out. |
broker | In leased_from. A company leasing address blocks to others. |
ASN lookups
Look up an autonomous system for its announced space by address type, anonymizer count, residential proxy exits, attribution and prefixes.
Field values
Every value the Intel API returns for address types, risk reasons, network types, RPKI, location confidence, sharing, crawlers, connection and routing.