Overview
Ingest IPs: The IP list provided by dan.me.uk contains addresses known to be used by TOR nodes. These nodes are often hosted on cloud infrastructure or by hosting providers such as AWS, Azure, Hetzner, and others.
The full IP list provided by dan.me.uk includes all active nodes participating in the TOR (The Onion Router) network. This comprehensive list covers entry nodes, relay (middle) nodes, and exit nodes, which together form the backbone of the TOR anonymity system. Each of these nodes plays a distinct role in routing encrypted traffic across the network, ensuring that the source and destination remain obscured.
While not all IPs on the full list will connect directly to public-facing services, they are all essential to the functioning of TOR. For example, entry and relay nodes are responsible for securely passing traffic within the network but do not make outbound connections to the internet. The full list is especially useful for researchers, analysts, or network administrators who want to monitor, study, or restrict all traffic associated with TOR—not just the exit points.
This list is updated frequently and can be used in network firewalls, monitoring systems, or analytics platforms to flag or manage TOR-related activity comprehensively.
There should be a 30-minute gap between each call.