Tor
Data ranges carrying the exported Tor classification.
- data ranges
- 1,339
- Associated ASNs
- 218
- IPv4 addresses
- 1,266
What a match means
The Tor signal describes a network classification at the snapshot date. Exit membership can change after collection.
- Matching rule
- is_tor = true
- Public API flag
- risk.is_tor
Selected examples
10 shownSamples selected across different ASNs. The example IP is the first address of the entry; it need not be an active host.
| Data range | Network operator | Country | Example IP |
|---|---|---|---|
| 13.143.167.5/32 | VPSPay Networks LTDAS201988 | Poland | 13.143.167.5 |
| 2.26.97.42/32 | PLAY2GO INTERNATIONAL LIMITEDAS215439 | Finland | 2.26.97.42 |
| 2.56.10.36/32 | IP Connect IncAS213373 | Seychelles | 2.56.10.36 |
| 23.111.15.127/32 | LEASEWEB SINGAPORE PTE. LTD.AS59253 | Singapore | 23.111.15.127 |
| 23.128.248.160/28 | StormyCloud IncAS400226 | United States | 23.128.248.160 |
| 23.129.64.130/31 | Emerald OnionAS396507 | United States | 23.129.64.130 |
| 23.134.76.27/32 | Fourplex Telecom LLCAS27284 | United States | 23.134.76.27 |
| 23.134.88.60/31 | Cloudie Networks LLCAS924 | United States | 23.134.88.60 |
| 23.137.105.248/32 | Advin Services LLCAS22295 | United States | 23.137.105.248 |
| 23.137.253.113/32 | IncogNet LLCAS40663 | United States | 23.137.253.113 |
Showing 10 of 1,339 recordsFor full-list access, email [email protected].
Associated autonomous systems
10 shown · Most matching entries firstCounts use data ranges. ASN and country assignments come from the matching CSV record.
| Network operator | Matching entries |
|---|---|
| Stiftung Erneuerbare FreiheitAS60729 | 99 |
| Church of CyberologyAS215125 | 69 |
| Quintex Alliance ConsultingAS62744 | 61 |
| Fourplex Telecom LLCAS27284 | 51 |
| Unredacted IncAS401401 | 48 |
| MAXKO d.o.o.AS211619 | 41 |
| Emerald OnionAS396507 | 41 |
| FranTech SolutionsAS53667 | 41 |
| FlokiNET ehfAS200651 | 38 |
| netcup GmbHAS197540 | 35 |
Showing 10 of 218 recordsFor full-list access, email [email protected].
Country associations
10 shown · Most matching entries firstCounts use data ranges. They describe data assignments, not an operator’s physical presence.
| Country | Matching entries |
|---|---|
| United StatesUS | 325 |
| GermanyDE | 222 |
| The NetherlandsNL | 188 |
| SwedenSE | 67 |
| FranceFR | 46 |
| RomaniaRO | 33 |
| BulgariaBG | 27 |
| NorwayNO | 25 |
| AustriaAT | 24 |
| SwitzerlandCH | 23 |
Showing 10 of 58 recordsFor full-list access, email [email protected].
Method and limits
- Entry counts
- Each matching CSV range counts once. A range is not necessarily a BGP route.
- Associations
- ASN and country assignments come from the matching CSV record.
- Address coverage
- The sum of ordered, non-overlapping matching CSV ranges. Coverage measures address space, not devices or active hosts.
- IPv6 addresses
- 997
Website totals use the Enterprise Tor field. The API also retains legacy Tor overrides, which can extend its classification when present.
Classifications can overlap and use a fixed data release. Membership can change after collection; a non-match is not a safety verdict.
Read classification methodology