Tor Exit Node Checker

What is a Tor exit node?

The Tor network routes traffic through three relays: a guard (entry), a middle, and an exit. The exit node is where traffic leaves the encrypted Tor circuit and connects to the public internet. When you use Tor Browser to visit a website, the website sees the exit node's IP address, not yours.

Exit nodes are the most visible part of the Tor network — they're the IP addresses that appear in server logs, abuse complaints, and blocklists. The exit node operator can see the traffic's destination (and content, if it's not HTTPS), but can't see who sent it. The guard node knows your real IP but can't see your destination. No single relay knows both.

The Tor Project publishes the list of all relay IPs, including exit nodes. This is by design — Tor's anonymity comes from the cryptographic layering, not from hiding the relay list. This public list is what makes tools like this one possible: anyone can check if an IP is a Tor exit node.

There are roughly 1,000–2,000 exit nodes at any given time, compared to 6,500+ total relays. Running an exit node is legally and practically more complex than running a middle relay, because the exit node's IP is the one associated with whatever traffic passes through it — including abuse. This is why exit nodes are fewer and heavily concentrated in countries with strong legal protections for intermediaries.

Questions

Does this tool detect Tor Browser?

No. It checks whether your IP address is a known Tor exit node. If you're connected through Tor, your traffic exits through one of these nodes and this tool will detect that. It cannot detect whether you have Tor Browser installed but aren't using it.

Can Tor exit nodes see my traffic?

If you're visiting an HTTPS site (look for the padlock), the exit node can see which domain you're connecting to but not the content. If you're visiting an HTTP site (no padlock), the exit node can see everything — the URL, the content, any data you submit. Always use HTTPS over Tor.

Why would I check if an IP is a Tor exit node?

Security analysts check IPs from suspicious traffic to determine if it's coming through Tor. Service operators check to understand why certain IPs appear in logs from users they can't identify. And Tor users check to verify their own connection is actually using Tor.

Is using Tor illegal?

In most countries, using Tor is legal. It's a privacy tool used by journalists, activists, researchers, and ordinary people who want to browse without surveillance. Some countries restrict or block Tor — notably China, Russia, Iran, and Belarus — but using it is not inherently illegal in the EU, US, UK, or most democracies.

What does the "BadExit" flag mean?

The Tor directory authorities assign BadExit to relays caught tampering with traffic — injecting content, stripping SSL, or modifying downloads. BadExit relays are avoided by Tor clients and are effectively quarantined. It's the Tor network's self-policing mechanism.

How often does the exit node list change?

Constantly. Relays join and leave the network every day. The Onionoo API updates approximately every hour. A specific exit node IP might be active for years (stable relays) or hours (temporary ones). This tool checks the current state — an IP that isn't an exit node now may have been one yesterday.