Tor Metrics
  • Metrics
  • Home
  • Users
  • Servers
  • Traffic
  • Performance
  • Onion Services
  • Applications
  • More
  • News
  • Sources
  • Services
  • Development
  • Research
  • About
Tor Metrics
  • Home
  • Users
  • Servers
  • Traffic
  • Performance
  • Onion Services
  • Applications
  • Home
  • Users

Users

We estimate the number of users by analyzing the requests induced by clients to relays and bridges.

  • Relay users
  • Bridge users by country
  • Bridge users by transport
  • Bridge users by country and transport
  • Bridge users by IP version
  • BridgeDB requests by requested transport
  • BridgeDB requests by distributor
  • Top-10 countries by relay users
  • Top-10 countries by possible censorship events
  • Top-10 countries by bridge users
  • “The anonymous Internet”
Relay users graph

This graph shows the estimated number of directly-connecting clients; that is, it excludes clients connecting via bridges. These estimates are derived from the number of directory requests counted on directory authorities and mirrors. Relays resolve client IP addresses to country codes, so that graphs are available for most countries. Furthermore, it is possible to display indications of censorship events as obtained from an anomaly-based censorship-detection system (for more details, see this technical report). For further details check the documentation on Reproducible Metrics.

Download graph as PNG or PDF.

Download data as CSV.

Learn more about the CSV data format or how to reproduce the graph data.

Related events

The following events have been manually collected in the metrics-timeline Git repository and might be related to the displayed graph.

Dates Places/Protocols Description and Links
2013-12-04 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.18-rc-1-pt1 and 2.4.18-rc-2-pt1.
blog post
2013-11-11 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.17-rc-1-pt2.
blog post
2013-11-04 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.17-rc-1-pt1.
blog post
2013-11-03 <OR> Relays Microsoft adds the Mevade/Sefnit botnet signature to their Malicious Software Removal Tool.
blog post
2013-10-27 <OR> Relays Microsoft adds the Mevade/Sefnit botnet signature to various security scanners.
blog post
2013-10-11 ipv4 geoip database updated to "October 2 2013 Maxmind GeoLite Country" (geoip-db-digest A28267CED18A1D80B4298796E9FE42EC755420C0).
commit
2013-09-23 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.17-beta-2-pt3.
blog post
2013-09-10 ipv4 geoip database updated to "September 4 2013 Maxmind GeoLite Country" (geoip-db-digest CB632F60547F141E06FB0705D1F171047165722E).
commit
2013-08-19 to 2014-04-28 <OR> Relays Relay users increase globally from about 800K to over 5M, when computers in the Mevade/Sefnit botnet began using Tor to communicate. The user count decreased in the following months through efforts to clean up the botnet. Sometime in 2014-04, the botnet switched from using Tor to using SSH.
blog post tech report analysis switch to SSH
2013-08-12 ipv4 geoip database updated to "August 7 2013 Maxmind GeoLite Country" (geoip-db-digest 83CCB5AF823A5CCF3C86C3CA33AF801D4E8996EC).
commit
2013-08-10 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.15-beta-2-pt1.
blog post
2013-07-08 ipv4 geoip database updated to "July 3 2013 Maxmind GeoLite Country" (geoip-db-digest 4D558EA73DD91A0361DE3FA3E83171DCD38D1A2D).
commit
2013-06-05 ipv4 geoip database updated to "June 5 2013 Maxmind GeoLite Country" (geoip-db-digest 5E570BB92DBEE1D517E35DAA4A52F58FDA6BB44E).
commit
2013-06-02 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.12-alpha-2-pt1.
blog post
2013-05-13 ipv4 geoip database updated to "May 9 2013 Maxmind GeoLite Country" (geoip-db-digest 2ADCA1913666A685B141C03E7B2F50B3DB84FDC9).
commit
2013-04-08 ipv4 geoip database updated to "April 3 2013 Maxmind GeoLite Country" (geoip-db-digest 7DDD315EBCDC2A8BCA47A8B5153EB697947AC851).
commit
2013-03-19 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 0.2.4.11-alpha-2.
blog post
2013-03-07 ipv4 geoip database updated to "March 6 2013 Maxmind GeoLite Country" (geoip-db-digest CB30D739CF972BEE0EF0635838A2AD76E2171004).
commit
2013-02-08 ipv4 geoip database updated (geoip-db-digest 29DF86915FF87E2FBE12F3514776B7292B556CCD).
commit
2013-01-13 flashproxy obfs2 obfs3 Release of the pluggable transports browser bundle 2.4.7-alpha-1, containing flash proxy, obfs2, and obfs3 built in and enabled by default.
blog post ticket
2013-01-05 ipv4 geoip database updated to "January 2 2013 Maxmind GeoLite Country" (geoip-db-digest DBBBA6D1F6CD90E860DDD42C90A21CF8A1B8395F).
commit
2012-03-01 to 2013-08-19 Kazakhstan <OR> Kazakhstan blocks Tor TLS by ClientHello and ServerHello fingerprints.
ticket tor patches

© 2009–2023 The Tor Project

Contact

This material is supported in part by the National Science Foundation under Grant No. CNS-0959138. Any opinions, finding, and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the National Science Foundation. "Tor" and the "Onion Logo" are registered trademarks of The Tor Project, Inc.. Data on this site is freely available under a CC0 no copyright declaration: To the extent possible under law, the Tor Project has waived all copyright and related or neighboring rights in the data. Graphs are licensed under a Creative Commons Attribution 3.0 United States License.