How fresh is the Tor data?

The exit list changes frequently, so we refresh it continuously to catch new and retired relays quickly.

Should I block all Tor traffic?

That depends on your risk profile. Many teams challenge rather than block, since Tor also has legitimate privacy uses. The score helps you decide.

Yes — Tor is reported as part of the proxy verdict from GET /v1/proxy/{ip}.

IPScanner

Tor Exit Node Detection

Check whether an IP is a Tor exit node using a continuously updated live list, and automate the same check through the API.

Overview

What is a Tor exit node?

A Tor exit node is the last relay in the Tor network — the IP that the destination website actually sees. Traffic from a Tor exit could be anyone, anywhere, with their real location fully hidden. Tor exit node detection checks an IP against the live, frequently changing list of exit relays so you can apply the right policy to anonymous Tor traffic, whether that is blocking, challenging or simply logging it.

Signals

How Tor detection works

The exit list changes constantly, so freshness matters most.

Live exit list

Correlation against the public Tor exit-node list, refreshed continuously.

Relay history

Tracks IPs that have recently served as exit relays.

ASN context

Many exits sit in known hosting ranges, reinforcing the verdict.

Reputation

Past abuse from the exit raises its risk.

Anonymity flag

Clear signal that origin is fully obscured by Tor.

Confidence score

A 0–100 score accompanies every verdict.

Use cases

Where teams use it

High-risk actions

Block or challenge Tor traffic on payments and withdrawals.

Abuse mitigation

Reduce spam and harassment routed through Tor.

Compliance

Flag fully anonymised traffic for review.

Threat intel

Enrich logs with a Tor indicator during investigations.

More tools

Explore related detection tools

VPN Detection APIReal-time VPN detection API. Send any IP and get back whether it belongs to a commercial VPN, with a confidence score. Free tier, simple REST, fast global lookups.Proxy Detection APIDetect HTTP, SOCKS, residential and datacenter proxies plus Tor exit nodes from any IP with one REST call. Real-time proxy detection API with a free tier.Residential Proxy DetectionDetect residential proxies that disguise traffic as ordinary home connections. Real-time residential proxy detection by IP with confidence scoring and a free tier.Datacenter Proxy DetectionDetect datacenter and cloud-hosted proxies by IP in real time. Identify hosting ASNs used for proxying and scraping with confidence scoring and a free API tier.

探索工具套件

试试我们的其他工具

VPN 检测识别通过加密 VPN 隧道路由以掩盖真实位置的 IP。代理检测标记 HTTP、SOCKS、住宅和数据中心代理以及 Tor 出口节点。IP 地理定位将任意 IP 映射到国家、地区和城市，并提供 ISP 和时区数据。ASN 数据查询拥有某个 IP 段的自治系统编号（ASN）及其所属机构。WHOIS 信息获取域名和 IP 段的注册及所有权记录。

FAQ

Frequently asked questions

Enter the IP above. We correlate it against the live Tor exit list and return a verdict with a confidence score; the same check is available via the API.