dan.me.uk TOR List
ID: 2ae9452e-493e-5000-9630-329ef4ffde75
STIX ID: identity--2ae9452e-493e-5000-9630-329ef4ffde75
dan.me.uk publishes a continuously refreshed list of known TOR network node IP addresses, along with a subset marking which of those nodes are exit nodes. This processor publishes IP indicators for every TOR node in the feed, flagging whether each is a TOR exit node, to support anonymization-traffic detection, enrichment, and monitoring.