Skip to content
Install MCP

Threat feed

Tor Exit Nodes

Last fetched

TOR Network · refreshed hourly · last verified

Tor Exit Nodes is a TOR Network threat-intelligence feed, refreshed hourly, indexed by WhisperGraph.

Live data for this page is temporarily unavailable.

The graph returned an error for this lookup. Refresh in a moment to retry — fresh data is fetched on the next visit.

What is Tor Exit Nodes

Tor Exit Nodes is the canonical list of currently-advertised Tor exit-node IP addresses, derived from the Tor directory authorities' published consensus document. An exit node is a Tor relay willing to deliver traffic from the Tor network to the general internet — so traffic appearing to originate from any of these IPs has been routed through the Tor network and the originating user is, by design, not directly identifiable. The list is the primary input for fraud-prevention systems, comment-form spam filters, forum registration deny-lists, and outbound-egress evidence in incident-response work. It is indexed here as the canonical Tor-exit reference.

Source
https://check.torproject.org/torbulkexitlist
Refresh cadence
hourly

Indicators currently listed

Related pages

Pivot from Tor Exit Nodes into the indicators it lists.

Queries

Resolves the feed's categories.


MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categories
Run yourself →

The indicator-kind rollup and sample listed above.


MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESC
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.