dan.me.uk TOR List
ID: 0507d764-77c9-5241-a5eb-0053a6f38c45
STIX ID: identity--0507d764-77c9-5241-a5eb-0053a6f38c45
dan.me.uk publishes a continuously refreshed list of known TOR network node IP addresses, along with a subset marking which of those nodes are exit nodes. This processor publishes IP indicators for every TOR node in the feed, flagging whether each is a TOR exit node, to support anonymization-traffic detection, enrichment, and monitoring.