Tor exit node list
Live list of Tor exit-node IPv4 addresses, refreshed hourly from check.torproject.org. Use this list to block, flag, or simply contextualize Tor traffic in your own application. Every IP here is flagged as tor_exit by the IPLogs detection engine.
What is a Tor exit node?
Tor (The Onion Router) is an anonymity network that routes traffic through three randomly-selected volunteer relays before reaching its destination. The final relay — the exit node — is the IP address the destination server sees. Because exit nodes are public and their list is freely published by the Tor Project, they are one of the easiest categories to detect with 100% confidence.
Current count: 2,614 active exits
Sample of the first 100 exit IPs below. The full list is refreshed hourly by the IPLogs backend and used as a primary signal in the detection pipeline.
How to use this list
Two approaches:
- Fetch the raw list directly. The Tor Project publishes the feed at
check.torproject.org/exit-addresses. No authentication, no rate limit. Re-fetch once per hour. - Use the IPLogs API. POST an IP to
iplogs.com/v1/checkand check thesignals[].type == "tor_exit"field in the response. See the API docs.
Tor FAQ
What is a Tor exit node?
A Tor exit node is the final relay in the Tor network — the server that forwards your traffic to its destination on the regular internet. The destination only sees the exit node's IP, not yours. Exit IPs are published openly by the Tor Project so they are straightforward to detect and, where appropriate, block.
How often is the Tor exit list updated?
IPLogs refreshes the list hourly from check.torproject.org (the official bulk exit-list) and merges IPv6 exits from the onionoo API. The Tor consensus itself rotates every hour as relays come and go, so an up-to-date list requires regular polling at that cadence.
How do I block Tor exits at the firewall?
Pull the live list from iplogs.com/tor-exit-nodes or check.torproject.org, write it into an ipset or geo-deny block, and refresh hourly. For dynamic per-IP decisions, call the /v1/check API and act on the tor_exit signal. Always offer a dispute path — many Tor users are journalists or in censored regions.
Should I block all Tor users?
Almost never on read traffic. Tor users include journalists, activists, security researchers, and people in censored regions. Block writes and high-risk actions (signup, payment, admin) if your threat model requires it, and consider allowing read access so you don't punish legitimate privacy seekers by default.
Does IPLogs detect Tor over IPv6?
Yes. IPLogs merges the IPv4 bulk exit list with the onionoo API for IPv6 coverage, so a Tor exit on either family fires the tor_exit signal with full confidence. Sample listings on this page are IPv4 for readability, but IPv6 exits are covered by the API and the underlying detection pipeline.