Threat feed
Tor Exit Nodes
Last fetched
TOR Network · refreshed hourly · last verified
Tor Exit Nodes is a TOR Network threat-intelligence feed, refreshed hourly, indexed by WhisperGraph. WhisperGraph currently records 664 indicators listed by it.
What is Tor Exit Nodes
Tor Exit Nodes is the canonical list of currently-advertised Tor exit-node IP addresses, derived from the Tor directory authorities' published consensus document. An exit node is a Tor relay willing to deliver traffic from the Tor network to the general internet — so traffic appearing to originate from any of these IPs has been routed through the Tor network and the originating user is, by design, not directly identifiable. The list is the primary input for fraud-prevention systems, comment-form spam filters, forum registration deny-lists, and outbound-egress evidence in incident-response work. It is indexed here as the canonical Tor-exit reference.
- Refresh cadence
- hourly
Category drift. The curated category for this feed is TOR Network, while WhisperGraph currently files it under tor.
Indicators currently listed
664 indicators across 2 node types.
PREFIX · 2
Related pages
Pivot from Tor Exit Nodes into the indicators it lists.
Queries
Resolves the feed's categories.
MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categoriesThe indicator-kind rollup and sample listed above.
MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESCOr query Whisper from your own LLM workflow via the Whisper MCP server.