Skip to content
InternetData
Open

Every Tor node, rebuilt every day.

The public Tor node set, published as ranges with the confidence and the build in which each was last observed, and refreshed daily so a node that left the network does not keep blocking customers.

Schema at a glance.

See documentation →

The schema and metadata are in the docs. It is published as CSVGZ and MMDB.

start_ipend_ipconfidencelast_seen
46.4.103.3546.4.103.35high2026-09-08
188.97.91.218188.97.91.218high2026-09-08
46.232.251.19146.232.251.191high2026-09-08
91.199.197.7591.199.197.75high2026-09-08
2620:18c:0:192::e0:1702620:18c:0:192::e0:170high2026-09-08
ID
tor_ip_v1
Entries
13,883
Refresh
Daily
CSVGZ
114 KB
MMDB
924 KB

Downloading it from code.

Database API reference →

One call gets you the current Tor IP build. Every official client wraps it three ways: straight to disk, a time-limited link you hand to your own runner, or bytes in memory, and checksums() returns the published digests to verify it against.

download()
Streams the current build to a file, which lands only once the whole transfer has arrived, so a failed one never leaves a truncated file behind.
downloadUrl()
The time-limited link the API redirects to, for your own downloader, a job runner or a CDN pull.
downloadBytes()
The build in memory, for a small database or a pipeline that never touches a filesystem.
metadata()
Row count, file sizes and when the build last updated. Poll it and fetch only when a new one has landed.
checksums()
The md5, sha1, sha256 and sha512 digests of one file, to verify it once it lands.
import os
from internetdata import InternetData
client = InternetData(os.environ["INTERNETDATA_API_KEY"])
# what is in today's build, without moving the file
meta = client.database.metadata("tor_ip_v1")
client.database.download("tor_ip_v1", "mmdb", "./tor_ip_v1.mmdb")
sums = client.database.checksums("tor_ip_v1", "mmdb")
print(meta.updated, meta.entries, sums["sha256"])
load.pypip install internetdata
Also available for .NET, Ruby, Rust, Swift, Erlang, Perl and Zig. See all on GitHub →

Where it occurs.

Tor IP holds 13,329 IPv4 addresses in the latest build. These are the countries and networks with the most of them; each opens its own page, as does every IP range.

By country

Of the 13,329 IP Geolocation places.

  1. United States4,067 · 30.51%
  2. Germany3,095 · 23.22%
  3. The Netherlands926 · 6.95%
  4. France729 · 5.47%
  5. United Kingdom426 · 3.20%
  6. Sweden318 · 2.39%
  7. Switzerland277 · 2.08%
  8. Canada261 · 1.96%
  9. Finland213 · 1.60%
  10. Russia196 · 1.47%

By network

Each /24 counted for the AS announcing most of it.

  1. AS368491st Amendment Encrypted Openness LLC1,174 · 8.81%
  2. AS24940Hetzner Online GmbH582 · 4.37%
  3. AS16276OVH SAS563 · 4.22%
  4. AS3320Deutsche Telekom AG418 · 3.14%
  5. AS197540netcup GmbH274 · 2.06%
  6. AS8560IONOS SE268 · 2.01%
  7. AS3209Vodafone GmbH260 · 1.95%
  8. AS36352HostPapa224 · 1.68%
  9. AS7922Comcast Cable Communications, LLC222 · 1.67%
  10. AS63949Akamai Connected Cloud208 · 1.56%

Getting your hands on it.

Free with an account, and the file is yours: teams join Tor IP against the traffic, logs and routing data they already hold, inside their own infrastructure.

Rules and scoring

Join the rows against traffic you already log and score a session on the operator and the confidence, rather than on one boolean.

Account and payment risk

Signals at signup and checkout, where the answer has to be local and consistent.

Network and abuse operations

Attribute what is hitting you to the infrastructure behind it, with provider IDs that stay stable as ranges rotate.

Free with an account
Sign up, then download it from the console, or with your API key from the API or any official client.
Checksums published per file: md5, sha1, sha256 and sha512.
The ID fixes the schema, so a new build never changes the columns your parser reads.

An official client for every major language.

All SDKs on GitHub →

Twelve official clients for the languages you ship in, each wrapping the database endpoints: list what you're licensed for, poll a build, follow the download redirect and verify what landed. Install commands are in the docs.

On this page

Is it every Tor relay?

Yes, any Tor node: guard and middle relays as well as the exits Tor traffic leaves the network from.