wiki:org/doc/ListOfServicesBlockingTor

List Of Services Blocking Tor

The Tor community maintains the following three lists (RBL blocks, Blocking software, and Individual blocks) as part of the DontBlockMe project.

Glossary

  • CDN - A CDN is a content delivery network: these are networks that websites use to serve high amounts of traffic to their clients. CDNs can be geographically distributed to provide "local" copies of web content to people worldwide.
  • Exit relay - This is a Tor relay that exits traffic onto the plain Internet. All Tor traffic (though not when using hidden services) appears to originate from these exit relays.
  • Non-exit relay - A Tor relay that does not act as an exit relay. A non-exit relay does not originate any traffic other than to other Tor relays and thus there is no necessary reason for services to block traffic from them. Guard and middle relays are the two types of non-exit relays, and many non-exit relays act as both types at the same time.
  • TCP RST - The TCP reset (or reject) is a way to gracefully close connections. Many services/software to block Tor traffic may block by explicitly closing the connection instead of ignoring the traffic.
  • TCP timeout - A TCP timeout is another way to block Tor traffic on the protocol- or routing-level, however it involves silently ignoring the traffic instead of rejecting it.

List of RBL Blocking Services

An RBL is a "realtime blackhole list" which is a DNS query-based list used to tag IP addresses as being malicious or as being an origin of spam. Due to the inability to filter or monitor Tor user behavior across the entire network, many Tor exit relay IPs will be marked as threatening (even indiscriminately) which means many legitimate web surfers will be incidentally included in such blocks. This is a subproject to routinely search for and clear Tor relay nodes from RBL and RBL-like lists.

Format:

  • [URL] - Description of service/list, threat detection and consequences for Tor users
  • http://www.abuseat.org/ - Composite Blocking List (CBL) - A Division of SPAMHAUS. By policy, TOR nodes cannot be removed from the CBL list. - Thus, the exact reason for being listed can no longer be established by the individual Tor .Exit Relay operator. Consequently, trying to effectively handle any 'abuse' issues being unfortunately perpetrated from an individual Tor .Exit Relay has become increasingly difficult or impossible when referencing this resource.
  • https://akismet.com/ - Blog comment spam protection. (Note: Previously this entry was "askimet.com", a misspelled version of "akismet" that redirected to the official site. It is not known whether this was a typo or a malicious website. Edited 10/5/2016)
  • https://www.blocked.com/ - Web request blocker against proxies and anonymity networks. The site itself is not available over Tor.
  • http://blogspam.net/ - Blog and forum content spam protection.
  • https://www.dan.me.uk/dnsbl - Blocklist designed to identify all Tor relays, even ones that do not exit traffic. There are both a list for exit relays as well as for all relays, though the provider does warn against using the list of all relays. The site itself is not available over Tor.
  • https://www.norse-corp.com/ - Web and networking protection including IP blocking.
  • https://www.projecthoneypot.org/ - Honeypot for e-mail harvesters by listing unique e-mail addresses on web pages.
  • https://recaptcha.net/ - the CAPTCHAs given are, on occasion, very difficult and timed [last check: 2015-11-21]
  • http://stopforumspam.com/ - IP-based blocking service based on forum and blog spam. The site itself is available from some Tor Exits, but not others (403 Forbidden). [last check: 2015-09-15, 1/10 Exits Blocked]

List Of Software Used To Block Tor

A listing of the software that has been identified as being used by the services listed below. This can present via another avenue to accomplish the goals of the DontBlockMe project. The format is:

  • [URL] - How to identify the blocking software when used by a service

How to unblock Tor users

If you run a web site on Cloudflare, and you don't want Tor users to see captchas, then whitelist the "T1" country code in the Access Rules of the Cloudflare Firewall app. See this article for more information.

Field guide to common block pages

Akamai

Akamai block page, 2015-10-22.

Access Denied
You don't have permission to access "%websitename%" on this server.
Reference #[\d\.a-f]+

Akamai is a CDN.

Bad Behavior

Bad Behavior block page, 2015-10-22.

Bad Behavior is an antispam PHP plugin.

Blackbaud

Blackbaud block page, 2015-10-22.

Not implemented  Tor IP not allowed.

Blackbaud does web hosting for nonprofits.

Bluehost

Bluehost block page, 2015-10-22.

Bluehost is a web hosting company. This seems to be their source code that is the source of the message: mod_rbld.

Cloudflare

CloudFlare block page, 2015-10-22.

One more step
Please complete the security check to access %websitename%

Cloudflare is a CDN.

Distil

Distil "Access to Website Blocked" screenshot.

Access To Website Blocked

Distil Networks is an anti-bot/anti-scraping company. They also have challenge pages that are less severe than this block page (which has status code 456).

List Of Services Blocking Tor

Services should be listed if:

  • They display a written policy that prohibits "Tor" specifically by name.
  • They display a written policy prohibiting proxies, VPNs, open/free networks, travelers, etc.
  • The text of an error message indicates "Tor", anonymous proxies, etc.
  • After testing with "signal NEWNYM / New Identity / MAPADDRESS", access and/or full use via Tor is found to be consistently problematic (defined as affecting at least 80% of all exits).

The list is formatted in alphabetical service groupings as follows:

  • URL of service - nature of block: complete, account creation, read-only, random breakage, etc. [last check: <current date in YYYY-MM-DD>]

Attention: Please be aware, that this page itself (https://trac.torproject.org) does block Tor traffic for registration and editing by showing very hard to read captchas.

The List

The current list is as follows...

Banking / Finance

Blogs ( by engine )

  • http://rankexploits.com/ - "TOR detected" (ZB Block), blocks even after solving captcha. [last check: 2015-03-18]
  • https://www.typepad.com/ (and subdomains) - Returns a custom 403 page, which is misleadingly labeled 404 [last check: 2016-06-05]
  • http://www.thebeatlesrarity.com/ - "Access has been blocked. Your IP [82.221.129.96] is found at Project Honey Pot . If you feel this is incorrect please contact them. Protected by: AVH First Defense Against Spam"

Charity

  • http://fordfoundation.org/ - Cloudflare hard block (1009): "The owner of this website (www.fordfoundation.org) has banned the country or region your IP address is in (TOR) from accessing this website."

Commercial

Business-to-User / Retail Shopping
Business-to-Business / Commerce and Industry / Advertising
Classified Ads

Computing / Technical

Education

  • https://dl.acm.org/ - ACM Digital Library: "403 Error - Access Forbidden" "...we have temporarily restricted your access to the Digital Library. Your activity appears to be coming from some type of automated process. To ensure the availability of the Digital Library we can not allow these types of requests to continue. The restriction will be removed automatically once this activity stops." [last check: 2015-10-04]
  • http://www.apa.org/ - "Access To Website Blocked" (Distil) from 9/10 Tor Exits, including the American Psychological Association's journals. [last check: 2016-03-18]
  • http://attainmentcompany.com/ - Augmentative & Alternative Communication software & device maker; appears to be returning TCP Timeout for non-exit nodes. [last check: 2015-09-15]
  • http://www.austlii.edu.au/ - AustLII (Australasian Legal Information Institute) website refuses connections from Tor Exits, but other IP addresses work fine. "A joint facility of UTS and UNSW Faculties of Law" [last check: 2015-09-16]
  • https://cltc.berkeley.edu/ - various forms do an AJAX POST that appears to stall forever. In the background it is receiving a response with status 200: "Access Denied. You have been blocked due to suspicious activity. If you believe this is in error, please email help@ischool/>. Allow Request. You have been blocked from entering information on this blog. In order to prevent this from happening in the future you may ask the owner to add your network address to a list that allows you full access." When I emailed help@ischool about it, they cited the stopforumspam.com database as a reason for blocking the IP, and "considering that this is a cybersecurity website, it would not be a wise choice to unblock that IP address." [last check: 2016-01-28]
  • http://www.disneyjunior.com/ - iPad and iPhone App IP blocked, "International Agreements/Cannot view outside the US". Customer service confirms IP is "Known Anonymizing Proxy Address". Blocks non-exit relay IPs.
  • http://www.gotw.ca/ - "The requested URL was rejected."; TCP timeout returned to non-exit relay IP [last check: 2015-09-17]
  • https://www.gutenberg.org/ - Error 403: "Don't use anonymizers, open proxies, VPNs, or TOR to access Project Gutenberg." (Most but not all exits) [last check: 2017-03-13] For an alternative download site, try https://archive.org/details/gutenberg.
  • http://adsabs.harvard.edu/ - "ADS Access Denied" custom 403 that mentions Project Honeypot. [last check: 2017-09-13]
  • http://ibiblio.org/ and subdomains - timeout. [last check: 2017-01-07]
  • http://www.ieeelcn.org/ (IEEE Conference on Local Computer Networks) - timeout. [last check: 2016-05-24]
  • http://www.justanswer.com/ - "Access Denied" (Akamai) [last check: 2015-04-02]
  • http://www.lirrhistory.com/ - "The requested URL was rejected. If you think this is an error, please contact the webmaster."; TCP timeout returned to non-exit relay IP [last check: 2015-09-17]
  • http://sites.nationalacademies.org/ - timeout [last check: 2016-07-13]
  • http://www.ohsu.edu/ - Blocked from non-exit relay IPs. [last check: 2015-01-23]
  • http://www.planetary.org/ - Not Implemented Tor IP not allowed (Convio/Blackbaud) [last check: 2015-10-04]
  • http://www.popsci.com/ - "You are receiving this error message because your ip (x.x.x.x) is listed in the StopForumSpam.com database." [last check: 2015-11-25]
  • http://www.questbridge.org/ - QuestBridge homepage refuses connections from Tor Exits, but the "Apply" subpage blocks all Tor nodes.
  • https://study.com/ - "403 Forbidden" returned when accessing any page. [last check: 2016-09-29]
  • Wikimedia projects including https://wikipedia.org/ - Reading free and supported; can also edit, after email request

Entertainment

  • http://www.montypython.net/ - "Malicious activity has been detected from your computer or another computer on your network." Status line HTTP/1.1 481 Request rejected due to security concerns. Please contact the website administrator for more information. Offers a captcha and submits form to /?_xv_waf=challenge. last check: [2017-03-27]
    • Block page provider isn't evident, but the block page of http://vtem.net/ shares the same recaptcha data-sitekey="6LcGhiETAAAAANnZZKj2kQ3N5DSLOrG1agDFWkx7".
  • https://noisetrade.com/ - blank response with status code 200. [last check: 2017-05-19]
  • http://www.simpsonsworld.com/ - Akamai. [last check: 2017-04-28]

Forums / Imageboards

  • http://4chan.org/ - "Permanently banned from all boards: Proxy/Tor exit node." - Read-only allowed, posting blocked.
  • http://www.albumartexchange.com/ - "www.albumartexchange.com is protected by BlockScript. Your request was blocked because you appear to be accessing this website from a Tor exit node." [last check: 2015-04-27]
  • https://arstechnica.com "Uh oh - it looks like your IP address or email has been reported by another forum system as a source of spam. Ars Technica uses StopForumSpam to keep our forums and comments clear of unwanted solicitations and malware. In order to register as an Ars Technica user, you will need to first clear up the issue with StopForumSpam. You can do that by filling out their handy contact form and explaining your situation." [last check: 2016-04-29]
  • http://bash.org/ - timeout. [last check: 2016-12-18]
  • http://www.boards.ie/ - TCP Connection timeout (also bans known VPN services) [last check: 2015-01-04]
  • https://drugs-forum.com/ - "Error 403" (Bad Behavior) returned when accessing any page [last check: 2015-04-27]
  • http://www.funtrivia.com/ - "Access Denied: code FTTT" with status 200. [last check: 2017-11-26]
  • https://www.jeuxvideo.com/ - "Votre adresse IP a été bloquée." - Read-only, can't subscribe or log in. [last check: 2015-05-01]
  • http://knowyourmeme.com/ - looks custom: "Your ip address 185.3.135.50 has been banned. If you think this is a mistake then please contact bans@… immediately and make sure to include your ip address." [last check: 2016-02-13]
  • http://www.marioboards.com/ - connection timeout. Possibly related to the www.mariowiki.com block (which is also a timeout) [last check: 2016-12-16]
  • http://forums.scribus.net/ - "Error 403" (Bad Behavior) [last check: 2017-07-31]
  • https://stackexchange.com/ and subservices like https://stackoverflow.com/ and https://tor.stackexchange.com/ - you can read questions, but doing a search sometimes results in: "Human Verification: Are you a human being? We apologize for the confusion, but we can't quite tell if you're a person or a script. Please don't take this personally. Bots and scripts can be remarkably lifelike these days!" with a Google captcha. It looks like the error page is always available at https://stackoverflow.com/nocaptcha. [last check: 2015-08-05]

Gaming

Government services / Publicly-funded resources

Clusters:

Health / Medical

  • http://www.everydayhealth.com/ - "Error: This page can't be displayed. Contact support for additional information. The incident ID is: N/A." [last check: 2017-01-17]

Image Hosting

  • https://imgur.com/ - "We're really sorry, but uploading from the Tor network has been disabled. Please disable Tor and try uploading again." Blocks uploading, allows browsing.

IRC / SIP / XMPP / "non-web" network communication services and messaging

For information specific to IRC, see Blocking IRC

  • https://kiwiirc.com/client - "Error Connecting (DNSBL blocked (195.154.56.44))" [last check: 2016-03-09]
  • https://webchat.oftc.net/ - "== ERROR: Anonymous TOR usage is unavailable" [last check: 2016-03-09]
  • Skype - Login attempts via a Tor exit node are rejected (since 2013, see list and blog): load icon spins forever; experience shows it can take ~6 weeks for a new exit node to be blacklisted
  • irc.mozilla.org - "Looking up your hostname... You're banned! ERROR :Closing link: (unknown@...) [Z-Lined: Tor exit server detected]" [last check: 2017-01-11]
  • http://chat.efnet.org:9090/ - "* Banned Temporary K-line 4320 min. - TOR exit node found. Visit http://rbl.efnetrbl.org/?i=93.115.95.201 for info. (2017/2/28 18.27)" [last check: 2017-03-01]

Mail services

News media

Professional

  • http://www.actorsequity.org/ - "This request is blocked by the SonicWALL Gateway Geo IP Service. Country Name:Anonymous Proxy." [last check: 2016-09-17]

Search engines

  • http://www.azlyrics.com/ - Site consistently is not accessible over Tor (TCP RST) for some unknown reason. This seems rather bizarre for a lyrics database site, assuming blocking the Tor connections is intentional. [last check: 2016-02-15]
  • https://tineye.com/ - "403 Forbidden, Your IP has been blocked from TinEye because it appears that you are not adhering to our Terms of Service." [last check: 2017-03-13]
  • https://www.ecosia.org/ - Returns "404 Not Found" but non-Tor IPs can access it.
  • https://www.google.com/ - Almost always shows the message "403. That’s an error. Your client does not have permission to get URL /sorry/IndexRedirect?continue=". Otherwise shows a captcha before permitting searching. In most cases after you have solved a captcha it will give you infinite chain of captchas. If the first attempt failed, change identity and try again. [last check: 2016-03-30]
  • https://www.yahoo.com/ - Yahoo temporarily blocks IPs sending too many queries. No workaround provided.

Social

Social networking

Communities / Friends / Interests
  • https://www.airbnb.com/ - Partial block. Impossible to log in, some pages return Error code: 503
  • http://www.avito.ru/ - Blank page.
  • https://www.chess.com/ - "We were unable to create your account. Please contact support to resolve this issue."
  • https://counter.social/ - "YIKES! You appear to be accessing Counter Social from a prohibited VPN, Proxy, Tor Node, hostile nation IP space or otherwise blacklisted IP." Home page says "We also actively block nodes and access to our community from IP space originating in Russia, China, North Korea, Iran, Pakistan and Syria, along with over 100,000 VPN and proxy services." [last check: 2017-11-26]
  • https://ello.co/ - "You've been blocked from accessing Ello. Oh no! Why me? Your recent actions have triggered our force field to protect Ello from online attacks. There are several actions that could trigger this, including submitting a certain word or phrase, a SQL command or malformed data." HTTP status is "416 Request Range Not Satisfiable" (wtf?). Appears to use Distil Networks for blocking. Direct link to block page: https://ello.co/distil_r_blocked.html. [last check: 2015-10-04]
  • https://forums.freebsd.org/ TCP timeouts, explicit rejects (TCP RST) and even works sometimes. [last check: 2016-06-18]
  • https://furaffinity.net/ Complete block. "Your IP address has been banned. Reason: Known TOR exit node." However, whatever list of exit nodes they're using seems to be pretty outdated, so it's very roughly 50/50 on whether you'll actually encounter that block or not.
  • http://www.godlikeproductions.com/ - "Sorry, ip address has been banned"
  • http://klinkk.com/ - "This request has been denied for security reasons. If you believe this was in error, please contact support."
  • http://mibbit.com/ - Closing Link: IP Z:Lined Tor exit server detected. torexit.dan.me.uk
  • https://www.pinterest.com/ - Error message after logging in. [when?]
  • https://twitter.com/signup - "Signup Denied, use Android/iPhone app on your phone instead."
  • https://yelp.com/ - "Sorry, you're not allowed to access this page." (also for other top level domains like yelp.de) [last check: 2017-02-18]
Dating
  • https://www.joyclub.de/ - "403 - Zugriff verweigert." This error is permanent and the operator says blocking Tor is intended.
  • https://www.pof.com/ - Periodic process may delete user after a while (hour to days) if geoIP does not match profile location, and for other reasons possibly related to IP. Try contacting csr@… and post any results to tor-talk.
  • https://www.zoosk.com/ - Access Denied (Akamai) [last check: 2017-02-01]
Professional
  • https://linkedin.com/ - You need to pass an image test before login, after which a login email validation is required. Might block completely due to "unusual traffic from your network connection." [last check: 2015-03-18]

Sports

Translation

Travel / Transportation

Hotels

Utilities ( Electric / Gas / Water / Telecom / TV / Internet )

Shipping
Telecommunications

Whitepages-owned sites:

Others:

TV / Video

Wikis

Service blocked (cannot view over Tor):

Service open (can view and edit over Tor):

List of formerly listed services

These were formerly listed in the above list, but someone (you) found that they now seem to work "more often than not" and thus moved them here adding the move date (do not remove the original reason for listing). Once listed here, other readers will check them from time to time. If they are still blocking "more often than not", feel free to move them back into the lists above. If they've been on this list for over a year, feel free to remove them as apparently having been a temporary IP block, not a complete class-based (Tor/VPN/Proxy) block. Listings older than 3 months should probably be removed.

Format:

  • [YYYY-MM-DD listed - URI - original reason, delisting notes]
  • 2015-03-18 - http://www.bbc.co.uk/iplayer/ = States not in the UK even from non-exit relay IPs. (BBC says they are trying to fix this problem since 10/2014 still not working 2/2015) It seems to work from UK-based exit nodes, which is actually surprising since it's trivial to "be" in the UK when you're using Tor. Then again, it's not like YouTube blocks Tor users despite the fact that Tor can be used to "be" anywhere and bypass regional blocks. It's probably in their best interest to not block Tor at least unless content providers become angry over regional bypassing. Perhaps we should have a new category just for content providers that are blocking for regional purposes and not for "security" reasons.
  • 2015-03-17 - http://facebook.com/ - Login puts account in validation required mode, if no phone number associated, may lose forever. Facebook offers an "experimental" .onion since October 2014 so this should relieve problems, at least when accessing it from its onion address.
  • 2015-03-18 - https://www.napaonline.com/ - "Access To Website Blocked" (Distil). Checking on 2016-03-18, the site is no longer on Distil, and doesn't block Tor.
  • https://archive.org/upload/ - Uploading with the in-browser uploader gives "There is a network problem. 403 Forbidden (details)." Clicking "(details)" doesn't do anything. [last check: 2016-07-03] It seems the problem has to do with third-party cookies. Unchecking "Restrict third party cookies and other tracking data" in Privacy and Security Settings allows the uploader to work. [last check: 2016-08-30]
  • 2017-02-01 - http://www.wiley.com/ - When trying to see or download a paper "Access to Wiley Online Library has been temporarily suspended at your institution. Your library and other administrators are working with Wiley to resolve this issue as quickly as possible. Please contact your library to see if there are alternative means of accessing the content you require (such as via on-campus access). We apologize for the inconvenience." [last check: 2016-04-10] Appears to work fine now. [2017-02-01]
  • 2017-02-01 - https://www.twilio.com/ - "Access Denied" (Akamai) [last check: 2016-11-08] Appears to be working now.
  • 2017-02-18 - http://arxiv.org/ - some operations sometimes result in an error, depending on your exit. For example, "Access Denied. Sadly, you do not currently appear to have permission to access http://arxiv.org/find. If you believe this determination to be in error, see http://arxiv.org/denied.html for additional information." [last check: 2015-08-05] Appears to work now.
  • 2017-03-04 - https://www.reversephonelookup.org/ - "One more step" (Cloudflare). [last check: 2016-05-09] Appears to work now.
  • https://www.etsy.com/ - Blank page [last check: 2015-09-04] Works without problems for a month now.
  • 2017-07-24 - https://www.r-bloggers.com/ - "This request has been denied for security reasons. If you believe this was in error, please contact support." Status code 406 "Not Acceptable" [last check: 2017-02-04] The site appears to be allowing connections through Tor now. It was probably a temporary block or on a specific Tor address.
Last modified 2 weeks ago Last modified on Dec 3, 2017, 4:17:06 AM

Attachments (6)

Download all attachments as: .zip