[{"data":1,"prerenderedAt":332},["ShallowReactive",2],{"navLinks":3,"sidebar_docs_navigation_\u002Ftor-exit-nodes":124,"navigation":125,"navLinks_footer":166,"page-\u002Ftor-exit-nodes":196},{"id":4,"extension":5,"links":6,"meta":121,"stem":122,"__hash__":123},"navigationMenu\u002Fnavigation.json","json",[7,57,62,103],{"label":8,"icon":9,"nested":10,"children":11},"API Products","i-lucide-box",true,[12,17,22,27,32,37,42,47,52],{"label":13,"to":14,"description":15,"icon":16},"Full IP Lookup","\u002Ffull-ip-lookup","Enrich any IP with complete intelligence","i-lucide-globe",{"label":18,"to":19,"description":20,"icon":21},"Proxy & VPN Detection","\u002Fproxy-vpn-detection","Identify proxies and VPN networks","i-lucide-shield-alert",{"label":23,"to":24,"description":25,"icon":26},"Tor Exit Nodes","\u002Ftor-exit-nodes","Block Tor anonymity network traffic","i-lucide-eye-off",{"label":28,"to":29,"description":30,"icon":31},"Granular Geolocation","\u002Fgranular-geolocation","Highly accurate location mapping","i-lucide-map-pin",{"label":33,"to":34,"description":35,"icon":36},"Threat Scoring System","\u002Fthreat-scoring-system","Unified traffic risk score","i-lucide-activity",{"label":38,"to":39,"description":40,"icon":41},"ASN & Carrier Data","\u002Fasn-carrier-data","Identify autonomous systems","i-lucide-server",{"label":43,"to":44,"description":45,"icon":46},"Disposable Email Check","\u002Fdisposable-email-check","Detect temporary email domains","i-lucide-mail",{"label":48,"to":49,"description":50,"icon":51},"User Agent Parser","\u002Fuser-agent-bot-parser","Parse messy HTTP headers","i-lucide-bot",{"label":53,"to":54,"description":55,"icon":56},"Verified Bots","\u002Fverified-bots-crawlers","Identify legitimate search engine crawlers","i-lucide-check-circle",{"label":58,"to":59,"icon":60,"nested":61},"Pricing","\u002Fpricing","i-lucide-credit-card",false,{"label":63,"to":64,"icon":65,"nested":10,"children":66},"Docs","\u002Fdocs","i-lucide-book-open",[67,71,76,81,86,91,95,98],{"label":68,"to":64,"description":69,"icon":70},"Getting Started","Learn how to setup and use IP Shield","i-lucide-rocket",{"label":72,"to":73,"description":74,"icon":75},"All Endpoints","\u002Fdocs\u002Fendpoints\u002Femail-domain-check","Reference for all IP Shield REST API endpoints","i-lucide-plug",{"label":77,"to":78,"description":79,"icon":80},"Network API","\u002Fdocs\u002Fendpoints\u002Fnetwork","Network intelligence and routing data","i-lucide-network",{"label":82,"to":83,"description":84,"icon":85},"Summary API","\u002Fdocs\u002Fendpoints\u002Fsummary","Full IP intelligence summary","i-lucide-bar-chart-2",{"label":87,"to":88,"description":89,"icon":90},"Lookup IP API","\u002Fdocs\u002Fendpoints\u002Flookup-ip","Single IP data lookup","i-lucide-search",{"label":92,"to":93,"description":94,"icon":31},"Geo Check API","\u002Fdocs\u002Fendpoints\u002Fgeo-check","Check geographic location",{"label":96,"to":73,"description":97,"icon":46},"Email Domain Check API","Verify disposable email domains",{"label":99,"to":100,"description":101,"icon":102},"User Agent Check API","\u002Fdocs\u002Fendpoints\u002Fuser-agent-check","Detect malicious user agents","i-lucide-monitor",{"label":104,"icon":105,"nested":10,"children":106},"Resources","i-lucide-library",[107,112,117],{"label":108,"to":109,"icon":110,"description":111},"About Us","\u002Fabout","i-lucide-info","Learn more about IP Shield and our mission",{"label":113,"to":114,"icon":115,"description":116},"Blog","\u002Fblog","i-lucide-newspaper","Latest news, updates, and security articles",{"label":118,"to":119,"description":120,"icon":46},"Contact Us","\u002Fcontact","Get in touch with our support team",{},"navigation","OH-Zj4UmYqVQJC8Ts6f4KeKRzXJYi5trdK22JpX9Y0Q",[],[126],{"title":63,"path":64,"stem":127,"children":128},"docs",[129,132,149],{"title":130,"path":64,"stem":131},"Introduction","docs\u002Findex",{"title":133,"path":134,"stem":135,"children":136,"page":61},"Credit & Authorization","\u002Fdocs\u002Fcredits-and-auth","docs\u002Fcredits-and-auth",[137,141,145],{"title":138,"path":139,"stem":140},"Authentication","\u002Fdocs\u002Fcredits-and-auth\u002Fauth","docs\u002Fcredits-and-auth\u002Fauth",{"title":142,"path":143,"stem":144},"Credits & Usage","\u002Fdocs\u002Fcredits-and-auth\u002Fcredits-usage","docs\u002Fcredits-and-auth\u002Fcredits-usage",{"title":146,"path":147,"stem":148},"Rate Limits","\u002Fdocs\u002Fcredits-and-auth\u002Frate-limits","docs\u002Fcredits-and-auth\u002Frate-limits",{"title":150,"path":151,"stem":152,"children":153,"page":61},"API Endpoints","\u002Fdocs\u002Fendpoints","docs\u002Fendpoints",[154,156,158,160,162,164],{"title":96,"path":73,"stem":155},"docs\u002Fendpoints\u002Femail-domain-check",{"title":92,"path":93,"stem":157},"docs\u002Fendpoints\u002Fgeo-check",{"title":87,"path":88,"stem":159},"docs\u002Fendpoints\u002Flookup-ip",{"title":77,"path":78,"stem":161},"docs\u002Fendpoints\u002Fnetwork",{"title":82,"path":83,"stem":163},"docs\u002Fendpoints\u002Fsummary",{"title":99,"path":100,"stem":165},"docs\u002Fendpoints\u002Fuser-agent-check",{"id":4,"extension":5,"links":167,"meta":195,"stem":122,"__hash__":123},[168,179,180,190],{"label":8,"icon":9,"nested":10,"children":169},[170,171,172,173,174,175,176,177,178],{"label":13,"to":14,"description":15,"icon":16},{"label":18,"to":19,"description":20,"icon":21},{"label":23,"to":24,"description":25,"icon":26},{"label":28,"to":29,"description":30,"icon":31},{"label":33,"to":34,"description":35,"icon":36},{"label":38,"to":39,"description":40,"icon":41},{"label":43,"to":44,"description":45,"icon":46},{"label":48,"to":49,"description":50,"icon":51},{"label":53,"to":54,"description":55,"icon":56},{"label":58,"to":59,"icon":60,"nested":61},{"label":63,"to":64,"icon":65,"nested":10,"children":181},[182,183,184,185,186,187,188,189],{"label":68,"to":64,"description":69,"icon":70},{"label":72,"to":73,"description":74,"icon":75},{"label":77,"to":78,"description":79,"icon":80},{"label":82,"to":83,"description":84,"icon":85},{"label":87,"to":88,"description":89,"icon":90},{"label":92,"to":93,"description":94,"icon":31},{"label":96,"to":73,"description":97,"icon":46},{"label":99,"to":100,"description":101,"icon":102},{"label":104,"icon":105,"nested":10,"children":191},[192,193,194],{"label":108,"to":109,"icon":110,"description":111},{"label":113,"to":114,"icon":115,"description":116},{"label":118,"to":119,"description":120,"icon":46},{},{"id":197,"title":198,"body":199,"cta":206,"description":217,"extension":218,"faqs":219,"features":242,"hasMarkDownContent":61,"hero":271,"meta":275,"navigation":10,"path":24,"sections":276,"seo":329,"stem":330,"__hash__":331},"pages\u002Ftor-exit-nodes.md","Tor Exit Node Detection API",{"type":200,"value":201,"toc":202},"minimark",[],{"title":203,"searchDepth":204,"depth":204,"links":205},"",2,[],{"title":207,"description":208,"links":209},"Secure your app from Tor traffic","Get 1,000 free requests per month when you register.",[210],{"label":211,"to":212,"external":10,"target":213,"color":214,"size":215,"icon":216,"trailing":10},"Get API Key","\u002Faccount","_self","primary","lg","i-lucide-arrow-right","Block or flag traffic originating from the Tor anonymity network instantly.","md",[220,224,228,231,235,239],{"label":221,"content":222,"icon":223},"What is a Tor Exit Node?","An exit node is the final gateway where encrypted Tor traffic hits the public internet. Traffic originating here is fully anonymous, masking the user's true IP address, and is frequently used for malicious activities or ban evasion.","i-lucide-help-circle",{"label":225,"content":226,"icon":227},"How often is the Tor node list updated?","We synchronize our intelligence with the Tor directory authorities continuously. The consensus is published roughly every hour, and our edge nodes are updated immediately, ensuring new exit nodes are flagged within minutes of coming online.","i-lucide-refresh-cw",{"label":229,"content":230,"icon":21},"Should I block all Tor traffic?","It depends on your business. For e-commerce, banking, or sensitive logins, blocking Tor is an industry best practice to prevent fraud. However, if you run a privacy-centric application or a journalism platform, you might just flag the traffic instead.",{"label":232,"content":233,"icon":234},"What is the exit_probability field?","The exit_probability is a calculated metric (between 0.0 and 1.0) indicating how much of the total Tor network's exit capacity is routed through this specific node. A higher number means the IP is more likely to be the source of the Tor traffic.","i-lucide-percent",{"label":236,"content":237,"icon":238},"Can Tor users bypass this detection?","No. The nature of the Tor network requires exit nodes to be publicly listed in the directory consensus so Tor clients know how to build circuits. Our API ingests this consensus directly, making bypass impossible.","i-lucide-lock",{"label":240,"content":241,"icon":26},"Does this API detect Tor bridges?","Tor bridges are entry points used to bypass censorship, not exit points. Since your application only sees the exit node, detecting bridges is not relevant for securing your inbound traffic.",{"title":243,"description":244,"items":245},"Reliable Dark Web Intelligence","Secure your application from anonymous threats.",[246,250,253,257,261,264,268],{"title":247,"description":248,"icon":249},"Near Real-time Sync","We monitor the Tor consensus network to detect new relays within minutes.","i-lucide-clock",{"title":251,"description":252,"icon":16},"Comprehensive Coverage","Identifies both documented exit nodes and unlisted bridge relays.",{"title":254,"description":255,"icon":256},"Combined Threat Context","Tor detection is returned alongside ASN and threat score data.","i-lucide-braces",{"title":258,"description":259,"icon":260},"Millisecond Response Times","Designed to be placed in the critical path of authentication flows.","i-lucide-gauge",{"title":262,"description":263,"icon":56},"Zero False Positives","Cryptographically verified against the Tor directory authorities.",{"title":265,"description":266,"icon":267},"Simple Integration","One REST API call gives you complete visibility into the network origin.","i-lucide-code",{"title":269,"description":270,"icon":60},"Quota Management","Easy credit tracking with HTTP 429 headers for rate limiting.",{"badge":272,"orientation":273,"json":274},"IP Intelligence","horizontal","{\n  \"ok\": true,\n  \"date\": \"2025-06-12T00:00:00Z\",\n  \"data\": {\n    \"ip\": \"185.220.101.12\",\n    \"proxy\": true,\n    \"vpn\": false,\n    \"threat_level\": 95,\n    \"is_known_bot\": false,\n    \"bot_details\": null,\n    \"is_tor_node\": true,\n    \"tor_details\": {\n      \"flags\": [\n        \"Exit\",\n        \"Fast\",\n        \"Running\",\n        \"V2Dir\",\n        \"Valid\"\n      ],\n      \"last_seen\": \"2025-06-12T00:00:00Z\",\n      \"exit_probability\": 0.85,\n      \"guard_probability\": 0.12,\n      \"exit_addresses\": [\n        \"185.220.101.12\"\n      ],\n      \"exit_policy_summary\": \"accept 80, 443\",\n      \"country\": \"DE\",\n      \"as_name\": \"TORNODE\",\n      \"as_id\": \"208294\"\n    },\n    \"asn\": {\n      \"asn_id\": \"208294\",\n      \"asn_name\": \"TORNODE\",\n      \"classification\": \"hosting\",\n      \"route_visibility_count\": 1054\n    }\n  },\n  \"meta\": {\n    \"total_credits\": 10000,\n    \"credits_remaining\": 9999\n  }\n}\n",{},[277,294,312],{"title":278,"description":279,"orientation":273,"image":280,"features":283},"Tor Exit Node Detection","The Tor network is widely used to obscure the true origin of network traffic. While sometimes used for legitimate privacy reasons, Tor exit nodes are frequently a source of malicious activity, spam, and hacking attempts. Our API detects this traffic instantly.",{"src":281,"alt":282},"\u002Fproducts\u002Ftor_exit_1781163834274.png","Tor Network Exit Node Detection",[284,287,291],{"title":285,"description":286,"icon":227},"Up-to-date Exit Nodes","Our lists are synced continuously with the Tor directory authorities.",{"title":288,"description":289,"icon":290},"Low Latency","Lookups take single-digit milliseconds to ensure no slowdowns.","i-lucide-zap",{"title":292,"description":293,"icon":267},"Simple Boolean Flag","Easily write logic against the `is_tor_node` property in the response.",{"title":295,"description":296,"orientation":273,"reverse":10,"image":297,"features":300},"Relay Metadata & Analysis","Beyond simple detection, the API provides rich metadata about the Tor relay itself. Understand the node's capabilities, its geographic location, and its exit probability to make nuanced security decisions rather than blanket blocking.",{"src":298,"alt":299},"\u002Fproducts\u002Ftor_relay_abstract.png","Tor relay metadata abstract visualization",[301,304,308],{"title":302,"description":303,"icon":234},"Exit Probability","Assess the mathematical likelihood that the given IP was acting as a Tor exit node.",{"title":305,"description":306,"icon":307},"Node Flags","Review raw Tor directory flags (Exit, Fast, Guard) assigned to the relay.","i-lucide-flag",{"title":309,"description":310,"icon":311},"Exit Policy Summary","Understand which ports the node allows traffic to exit from (e.g., HTTP\u002FHTTPS only).","i-lucide-door-open",{"title":313,"description":314,"orientation":273,"image":315,"features":318},"Deep Web Traffic Management","Apply the right amount of friction. For consumer e-commerce or sensitive banking applications, blocking Tor entirely is a best practice. For privacy-centric platforms, you can use our intelligence to monitor behavior instead.",{"src":316,"alt":317},"\u002Fproducts\u002Ftor_traffic_abstract.png","Deep web traffic management abstract visualization",[319,322,326],{"title":320,"description":321,"icon":21},"Spam Prevention","Automatically challenge or block forum sign-ups originating from Tor.",{"title":323,"description":324,"icon":325},"Account Security","Prevent unauthorized login attempts from actors masking their true location.","i-lucide-user-x",{"title":327,"description":328,"icon":238},"Reduce API Abuse","Stop scrapers and attackers using the Tor network to bypass rate limits.",{"title":198,"description":217},"tor-exit-nodes","2JKEeUHLC1Ct-psUhOhAHsQsiCbgnKk27LK82NNgZ7U",1782044513618]