How fresh is the Tor data?

The exit list changes frequently, so we refresh it continuously to catch new and retired relays quickly.

Should I block all Tor traffic?

That depends on your risk profile. Many teams challenge rather than block, since Tor also has legitimate privacy uses. The score helps you decide.

Yes — Tor is reported as part of the proxy verdict from GET /v1/proxy/{ip}.

IPScanner

Tor Exit Node Detection

Check whether an IP is a Tor exit node using a continuously updated live list, and automate the same check through the API.

Overview

What is a Tor exit node?

A Tor exit node is the last relay in the Tor network — the IP that the destination website actually sees. Traffic from a Tor exit could be anyone, anywhere, with their real location fully hidden. Tor exit node detection checks an IP against the live, frequently changing list of exit relays so you can apply the right policy to anonymous Tor traffic, whether that is blocking, challenging or simply logging it.

Signals

How Tor detection works

The exit list changes constantly, so freshness matters most.

Live exit list

Correlation against the public Tor exit-node list, refreshed continuously.

Relay history

Tracks IPs that have recently served as exit relays.

ASN context

Many exits sit in known hosting ranges, reinforcing the verdict.

Reputation

Past abuse from the exit raises its risk.

Anonymity flag

Clear signal that origin is fully obscured by Tor.

Confidence score

A 0–100 score accompanies every verdict.

Use cases

Where teams use it

High-risk actions

Block or challenge Tor traffic on payments and withdrawals.

Abuse mitigation

Reduce spam and harassment routed through Tor.

Compliance

Flag fully anonymised traffic for review.

Threat intel

Enrich logs with a Tor indicator during investigations.

More tools

Explore related detection tools

VPN Detection APIReal-time VPN detection API. Send any IP and get back whether it belongs to a commercial VPN, with a confidence score. Free tier, simple REST, fast global lookups.Proxy Detection APIDetect HTTP, SOCKS, residential and datacenter proxies plus Tor exit nodes from any IP with one REST call. Real-time proxy detection API with a free tier.Residential Proxy DetectionDetect residential proxies that disguise traffic as ordinary home connections. Real-time residential proxy detection by IP with confidence scoring and a free tier.Datacenter Proxy DetectionDetect datacenter and cloud-hosted proxies by IP in real time. Identify hosting ASNs used for proxying and scraping with confidence scoring and a free API tier.

探索工具套件

試試我們的其他工具

VPN 偵測識別透過加密 VPN 隧道路由以隱藏真實位置的 IP。代理偵測標記 HTTP、SOCKS、住宅及數據中心代理，以及 Tor 出口節點。IP 地理定位將任何 IP 對應至國家、地區及城市，並提供 ISP 與時區資料。ASN 資料查詢擁有某個 IP 範圍的自治系統編號（ASN）及其所屬機構。WHOIS 資訊擷取網域與 IP 範圍的註冊及擁有權記錄。

FAQ

Frequently asked questions

Enter the IP above. We correlate it against the live Tor exit list and return a verdict with a confidence score; the same check is available via the API.