# Large disruption in Tor exit node population: visible in your data?
**URL:** https://bnoc.xyz/t/large-disruption-in-tor-exit-node-population-visible-in-your-data/197
**Category:** Observations
**Created:** [October 21, 2026, 2:37pm UTC](https://bnoc.xyz/t/large-disruption-in-tor-exit-node-population-visible-in-your-data/197 "2026-10-21T14:37:03Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@jonhbit](https://bnoc.xyz/u/jonhbit)
#### Post date: [October 21, 2026, 2:37pm UTC](https://bnoc.xyz/t/large-disruption-in-tor-exit-node-population-visible-in-your-data/197/1 "2026-10-21T14:37:03Z")
Looks like there was an attack that hijacked 300+ Tor relay nodes, promoted them to exit nodes (to become 10+% of the count of exit nodes at the time), and was then discovered and stopped. Roughly, detected on October 2nd and resolved by October 5th.
> **[How I got over 300 Tor exit nodes removed](https://kaba.cx/posts/20261020_Tor/)**
I wonder if any of us can observe the churn in the Tor population of relays and exits in our own data. I haven’t spend much effort yet looking at connection churn on my setup, but I think others have.
---
### Author:  [@b10c](https://bnoc.xyz/u/b10c)
#### Post date: [October 21, 2026, 11:05pm UTC](https://bnoc.xyz/t/large-disruption-in-tor-exit-node-population-visible-in-your-data/197/2 "2026-10-21T23:05:44Z")
I did not see any significant drop or change in Tor peer connectivity on these dates across.
Neither did I see any significant connection drop or change in connectivity from IPv4 connections from Tor exit nodes.
However, I’m also not sure if that’s actually looking at the right data.