Netify Netify logo Contact Us
Products Resources Documentation Blog Sign In

Tor Object

The Tor (tor ) object contains metadata for IP addresses identified as part of the Tor (The Onion Router) network. It distinguishes between node types and provides performance metrics used for traffic classification and risk assessment. This intelligence is available through both the IP API and the Tor IP Datasets.

Tor IP Example: Andromeda

To illustrate the available Tor attributes, consider the Andromeda node - a high-capacity infrastructure component currently delivering bandwidth of 26.3 MiB/s. First observed on December 20, 2025, this node operates as a dedicated relay IP on port 9001 and serves as a critical intermediary in the Tor network.

Tor Node Info
Application
Tor - Logo Tor
Nickname
Andromeda
Fingerprint
CC6D78CF433A27...
Type
Relay IP
Port
9001
Bandwidth
26.3 MiB/s
First Seen
December 20, 2025

Tor Object Overview

application

object - Application Object
The Tor application object.

tor_node_list

array
The list of Tor nodes running on the IP address. See details below.

Tor Object - JSON Overview

"tor": {
    "application": { Application Attributes },
    "tor_node_list": [ Tor Node Objects ]
}

Tor Node Overview

A single IP address can host multiple Tor instances. The JSON example demonstrates a dual-server configuration running on ports 443 and 9001. Metadata such as bandwidth and uptime is tracked per instance to ensure accurate traffic classification across ports on the same host.

Tor nodes often share infrastructure with other applications. Common sharing scenarios include NTP time servers providing network-wide synchronization and consumer VPN providers integrating Tor exit points into public-facing gateways.

Tor Node Attributes

nickname

string
A nickname specified by the Tor node operator.

fingerprint

string
A 20-byte unique identifier.

type

string
The node type: exit or relay. You can learn more about relay types here.

port

integer
The TCP port served by the Tor server.

bandwidth

integer
Advertised bandwidth in bytes per second.

last_restarted_at

integer
The Unix time when the node was last restarted.

Tor Object - JSON Example

"tor": {
  "application": {
     "id": 163,
     "tag": "tor",
     "label": "Tor",
     "description": "Tor is an open-source...",
     "home_page": {
       "url": "https://www.torproject.org",
       "text": "Tor"
     },
     "category": {
       "id": 28,
       "tag": "vpn-and-proxy",
       "label": "VPN and Proxy"
     },
     "active": true,
     "favicon": "https://static.netify.ai/...",
     "icon": "https://static.netify.ai/...",
     "logo": "https://static.netify.ai/...",
     "favicon_source": "app",
     "icon_source": "app",
     "logo_source": "app"
  },
  "tor_node_list": [
     {
       "nickname": "Andromeda",
       "fingerprint": "3D8BE...",
       "type": "relay",
       "port": 9001,
       "bandwidth": 34000000,
       "last_restarted_at": 1705924800
     },
     {
       "nickname": "Magellan",
       "fingerprint": "B3100...",
       "type": "relay",
       "port": 443,
       "bandwidth": 25000000,
       "last_restarted_at": 1705934759
     }
  ]
}