XTM Hub by Filigran

Dan.me.uk (All TOR nodes)

Infrastructure & Attack Surface Visibility
Detection & Response Enablement

Aperçu

Ingest IPs: The IP list provided by dan.me.uk contains addresses known to be used by TOR nodes. These nodes are often hosted on cloud infrastructure or by hosting providers such as AWS, Azure, Hetzner, and others.

The full IP list provided by dan.me.uk includes all active nodes participating in the TOR (The Onion Router) network. This comprehensive list covers entry nodes, relay (middle) nodes, and exit nodes, which together form the backbone of the TOR anonymity system. Each of these nodes plays a distinct role in routing encrypted traffic across the network, ensuring that the source and destination remain obscured.

While not all IPs on the full list will connect directly to public-facing services, they are all essential to the functioning of TOR. For example, entry and relay nodes are responsible for securely passing traffic within the network but do not make outbound connections to the internet. The full list is especially useful for researchers, analysts, or network administrators who want to monitor, study, or restrict all traffic associated with TOR—not just the exit points.

This list is updated frequently and can be used in network firewalls, monitoring systems, or analytics platforms to flag or manage TOR-related activity comprehensively.

There should be a 30-minute gap between each call.

Informations de base

Filigran
Abc Abc
Flux CSV
Threat Intelligence Feed
24 septembre 2026
200+
100+

    Nous utilisons des cookies pour assurer le fonctionnement de XTM Hub. Les cookies nécessaires sont toujours activés ; les cookies facultatifs (fonctionnels, d'analyse, de marketing) ne sont utilisés qu'avec votre consentement. Vous pouvez accepter tous les cookies, les refuser tous ou gérer vos préférences à tout moment dans la rubrique « Paramètres des cookies ».