Tor IP Address Check
Free IP Address Tor Detection Test
Instantly perform a Tor IP check to determine whether an address is part of the Tor network. Detect Tor nodes and exit nodes using real-time threat intelligence.
Strengthen fraud prevention with the IPQS proxy detection service and API.
Trusted by thousands of companies
Recent Tor Detection Tests
The following IP addresses had recent Tor detection checks.
Tor IP Address Check FAQs
Run a Tor check above to identify Tor network traffic, then use a full IP lookup for deeper risk analysis and context.
Learn more about Tor IP detection
Understand Tor traffic, identify high-risk anonymous connections, and add real-time Tor detection to your fraud defenses.
Integrate Tor Detection Directly In Your Site!
More than 2 million people use the Tor network each day to anonymously make connections online. Surprisingly, over 98% of Tor traffic is directed towards public websites, rather than hidden sites that can only be reached by the Tor network. Since Tor can mask a user's real identity online, including their location, they are often used for malicious actions online.
Detecting Tor IP addresses is only a part of the battle against fraud. IPQS proxy detection makes it easy to check if an IP address is a Tor connection or an active proxy or VPN connection. IPQS makes it easy to detect high risk IPs.
Want to add Tor detection to your site? Upload a CSV file with IP addresses or view the proxy detection API documentation to get started.
What Is a Tor IP Address Check?
A Tor IP address check determines whether an IP address belongs to the Tor network. Because Tor routes traffic through encrypted relays, a Tor check helps identify users who may be browsing anonymously and masking their real location.
A normal IP address typically maps back to an ISP, business network, or mobile carrier. A Tor IP address, however, is tied to a Tor relay or exit node, which makes attribution harder and can be associated with higher-risk or suspicious activity depending on the use case.
Reliable Tor detection uses real-time monitoring of active Tor nodes and exit nodes, with frequent updates to reflect the current Tor network. This allows organizations to quickly confirm whether an IP is using Tor and apply the right security or fraud controls.
How to Detect Tor IP Addresses
IPQS monitors all IP addresses that are active within the Tor network. Searching an IP address above will determine if the IP address is a Tor node or Tor exit. This list updates every few seconds to include the latest Tor connections.
Tor detection can also be achieved by using a real-time API query to our proxy detection service or analyzing a CSV file with IP addresses.
Are Tor Connections Bad?
Tor connections do have a bad reputation, but are not necessarily bad. Internet users may want to browse the web anonymously without allowing their government, ISP, or even the website they are browsing to view their IP address or browsing habits.
It's no surprise that Tor is very popular with journalists and residents of less tolerant governments. However, many hackers and cybercriminals also use the Tor network to conceal their identity and engage in malicious behavior. More often than not, Tor IP addresses are bad news. Common examples of abuse from Tor connections are scraping content, using stolen credit cards, phishing, creating fake accounts, and even hacking.