Synthient
Get in touch

Detection Data For The Modern Web.

Track and block millions of malicious entities. Create powerful rules and policies to integrate Synthient into your existing systems and workflows.

Dashboard overview

All services healthy

Lookup success
98.92%
186 lookups
Proxy events
1.1B
4%
Unique proxies
35.4M
2%
Team members
2
Enterprise plan
Active providers
98
of 793 tracked
Activity

Lookups over time

api/v4 successful lookups

Lookups
100,147

Tracking 2,500+ providers

Attackers move fast in the real world. Synthient moves faster.

01

Identify Malicious Infrastructure and Behavior

Send one IP or domain and get ASN, ISP, country, network type, proxy provider, behavior tags, and a 0 to 100 risk score.

  • IPv4 and IPv6 lookup
  • Provider attribution
  • Behavior arrays
  • Batch enrichment
View Lookup API
JSON record
{
"ip": "101.53.218.152",
"network": {
"asn": 55850,
"isp": "Mercury NZ Limited",
"type": "RESIDENTIAL",
"org": "Mercury NZ Limited",
"domain": "mercury.co.nz",
"abuse_email": "abuse-alerts@as55850.net",
"abuse_phone": "+000000000"
},
"location": {
"country": "NZ",
"state": "CAN",
"city": "Christchurch",
"timezone": "Pacific/Auckland",
"latitude": -43.532,
"longitude": 172.341,
"geo_hash": "rb6"
},
"intelligence": {
"risk_score": 96,
"behavior": ["PROGRAMMATIC_TRAFFIC"],
"categories": ["RESIDENTIAL_PROXY"],
"devices": [
{
"os": "ANDROID",
"version": "14",
"last_seen": 1777248000
},
{
"os": "WINDOWS",
"version": "11",
"last_seen": 1776729600
}
],
"providers": [
{
"provider": "LUNAPROXY",
"type": "RESIDENTIAL_PROXY",
"last_seen": 1776729600
},
{
"provider": "BRIGHTDATA",
"type": "RESIDENTIAL_PROXY",
"last_seen": 1777248000
}
]
}
}
02

Bulk historical data accessible in any environment.

Download hourly and daily snapshots of proxy, VPN, relay, crawler, and anonymizer data. Load them into a warehouse, notebook, or review workflow.

  • Hourly and daily snapshots
  • Historical data
  • Developer friendly
  • Parquet support

Feeds

Updated 7m ago

Datasets 3

Proxies

GET /api/v4/feeds/proxies/export/latest
SnapshotRowsSize
03

Realtime Data Powering Realtime Detections.

Stream residential proxies, VPNs, relays, and anonymizers as they come online. Send the live feed to fraud, auth, SIEM, or Kafka systems.

  • Second precision
  • Thousands of events/s
  • Realtime detections
  • Event routing
View Firehose workflow
MONITORING
Alertslive
04

Helios: attribute with confidence.

Helios records HTTP, TLS, DNS, and ADB traffic hitting Synthient honeypots, then connects each capture to the source IP, proxy provider, and target.

  • Botnet traffic capture
  • Targeted domains and paths
  • HTTP, TLS, DNS, and ADB captures
  • Exit IPs
View Helios
Botnet traffic live
google.comTARGETED
One pivot

Helios captures live botnet traffic as it moves through a real proxy path.

Research

The latest from Synthient.

All research

Pricing & access

Pay for precision.

Four levels of access. All custom quoted.

Compare all features
Lookup API

Researcher

IP intelligence for research and investigation.

Custom quoteBased on your requirements
Request a quote
API lookups / month
4M
Data granularity
Daily

Product access

  • Lookup APIIncluded
  • FeedsNot included
  • FirehoseNot included
  • HeliosNot included
Feeds

Startup

Bulk data for your warehouse and analysis.

Custom quoteBased on your requirements
Request a quote
API lookups / month
6M
Data granularity
Hourly

Product access

  • Lookup APIIncluded
  • FeedsIncluded
  • FirehoseNot included
  • HeliosNot included
FirehoseReal time

Business

Fresh observations for production detection.

Custom quoteBased on your requirements
Request a quote
API lookups / month
8M
Data granularity
Second

Product access

  • Lookup APIIncluded
  • FeedsIncluded
  • FirehoseIncluded
  • HeliosNot included
Helios

Enterprise

Threat telemetry and access tailored to your team.

Custom quoteBased on your requirements
Request a quote
API lookups / month
Custom
Data granularity
Custom

Product access

  • Lookup APIIncluded
  • FeedsIncluded
  • FirehoseIncluded
  • HeliosIncluded

FAQ

Frequently Asked Questions

Need specifics on access, pricing, or fit? Reach the team directly.

Email uscontact@synthient.comSchedule a call30 min
Do you offer free trials?

Yes. We offer scoped evaluations for qualified teams so you can test lookup responses, feed samples, and integration fit before a commercial rollout.

Can I make historical lookups?

Yes. Historical analysis is available through retained feed snapshots and plan-scoped data access. The Lookup API is optimized for current enrichment, while Feeds are built for backfills and warehouse joins.

Are there any commercial restrictions to the data?

Commercial use is governed by your signed agreement. Internal fraud, abuse, access, and security workflows are supported; resale, redistribution, or public mirroring requires explicit permission.

What is the difference between Proxy Feeds and the Proxy Firehose?

Proxy Feeds are Parquet files for warehouse jobs, backfills, and audits. Proxy Firehose is a live NDJSON stream for new observations that need to update block, challenge, or review rules quickly.

What kind of support do you offer?

We help with onboarding, schema mapping, API and CLI integration, feed delivery, Firehose filters, and production rollout questions. Enterprise plans can include deeper review and dedicated support paths.

Free scanNo sign-up

Check if your platform is targeted by residential proxies.

Enter a domain to see recent requests, source IPs, proxy providers, ports, and subdomains in a public sample report.