Tor IP Lookup - FullHunt API Documentation

Request

GET /api/v1/nexus/tor/check-ip?ip={ip_address}

curl --get "https://fullhunt.io/api/v1/nexus/tor/check-ip" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  --data-urlencode "ip=192.0.2.10"

Parameter	Required	Description
`ip`	Yes	Valid IPv4 or IPv6 address

The route is limited to 60 requests per minute and deducts one Nexus credit after a validated successful request.

Interpret the result

A match means the address appeared in the Tor exit-node dataset represented by the response. It does not establish malicious activity. Combine it with event time, authentication outcome, request behavior, IP context, and other incident evidence. The example address is reserved for documentation. See SOC IOC Enrichment for a normalized workflow.