Version 254 (modified by 4 years ago) (diff) | ,
---|
List Of Services Blocking Tor
Page Outline
The Tor community maintains the following three lists (RBL blocks, Blocking software, and Individual blocks) as part of the DontBlockMe project.
Glossary
- CDN - A CDN is a content delivery network: these are networks that websites use to serve high amounts of traffic to their clients. CDNs can be geographically distributed to provide "local" copies of web content to people worldwide.
- Exit relay - This is a Tor relay that exits traffic onto the plain Internet. All Tor traffic (though not when using hidden services) appears to originate from these exit relays.
- Non-exit relay - A Tor relay that does not act as an exit relay. A non-exit relay does not originate any traffic other than to other Tor relays and thus there is no necessary reason for services to block traffic from them. Guard and middle relays are the two types of non-exit relays, and many non-exit relays act as both types at the same time.
- TCP RST - The TCP reset (or reject) is a way to gracefully close connections. Many services/software to block Tor traffic may block by explicitly closing the connection instead of ignoring the traffic.
- TCP timeout - A TCP timeout is another way to block Tor traffic on the protocol- or routing-level, however it involves silently ignoring the traffic instead of rejecting it.
List of RBL Blocking Services
An RBL is a "realtime blackhole list" which is a DNS query-based list used to tag IP addresses as being malicious or as being an origin of spam. Due to the inability to filter or monitor Tor user behavior across the entire network, many Tor exit relay IPs will be marked as threatening (even indiscriminately) which means many legitimate web surfers will be incidentally included in such blocks. This is a subproject to routinely search for and clear Tor relay nodes from RBL and RBL-like lists.
Format:
- [URL] - Description of service/list, threat detection and consequences for Tor users
- https://askimet.com/ - Blog comment spam protection.
- https://www.blocked.com/ - Web request blocker against proxies and anonymity networks. The site itself is not available over Tor.
- http://blogspam.net/ - Blog and forum content spam protection.
- https://www.dan.me.uk/dnsbl - Blocklist designed to identify all Tor relays, even ones that do not exit traffic. There are both a list for exit relays as well as for all relays, though the provider does warn against using the list of all relays. The site itself is not available over Tor.
- https://www.norse-corp.com/ - Web and networking protection including IP blocking.
- https://www.projecthoneypot.org/ - Honeypot for e-mail harvesters by listing unique e-mail addresses on web pages.
- http://stopforumspam.com/ - IP-based blocking service based on forum and blog spam. The site itself is not available over Tor.
List Of Software Used To Block Tor
A listing of the software that has been identified as being used by the services listed below. This can present via another avenue to accomplish the goals of the DontBlockMe project. The format is:
- [URL] - How to identify the blocking software when used by a service
- http://akamai.com/ Fifa.com, tdbank.com, expedia.com, www.ecb.europa.eu, discussions.apple.com seem to be using Akamai and use some sort of configuration that blocks Tor (not all Akamai sites block Tor). Akamai blocks usually present with a basic page saying "Access Denied" and a 'reference' note like "Reference #18..." You can definitively confirm whether a site uses the Akamai CDN by running a WHOIS on the site's domain and looking for akam.net nameservers.
- https://www.cloudflare.com/ - Usually announces itself as CloudFlare, gives Tor/A1 notice, etc.
- http://www.incapsula.com/ - Usually announces itself as Incapsula, gives Tor/A1 notice, etc.
- Convio/Blackbaud - A web host for various nonprofits. Blocks Tor specifically, returning an HTTP 501 error: "Not Implemented Tor IP not allowed". A traceroute leads to a subdomain of convio.net. http://www.adl.org/ is one affected site [last check: 2015-07-15].
List Of Services Blocking Tor
Services should be listed if:
- They display a written policy that prohibits "Tor" specifically by name.
- They display a written policy prohibiting proxies, VPNs, open/free networks, travelers, etc.
- The text of an error message indicates "Tor", anonymous proxies, etc.
- After testing with "signal NEWNYM / New Identity / MAPADDRESS", access and/or full use via Tor is found to be consistently problematic (defined as affecting at least 80% of all exits).
The list is formatted in alphabetical service groupings as follows:
Type of Service
Tor Open:
- List up to five (5) leading counterexamples of competing services that happen to not block Tor (use WeSupportTor for explicit Tor supporters). Then list all the services of that type that do block Tor. "Tor Open/Blocked" headings may be omitted until there is at least one counterexample.
Tor Blocked:
- URL of service - nature of block: complete, account creation, read-only, random breakage, etc. [last check: <current date in YYYY-MM-DD>]
The List
Category List
- Banking / Finance
- Blogs ( by engine )
- Commercial
- Computing / Technical
- Education
- Forums / Imageboards
- Gaming
- Government services / Publicly-funded resources
- Image Hosting
- IRC / SIP / XMPP / "non-web" network communication services and messaging
- Mail services
- News media
- Search engines
- Social networking
- Sports
- Utilities ( Electric / Gas / Water / Telecom / TV / Internet )
- Shipping
- Wikis
The current list is as follows...
Banking / Finance
- https://secure.bankofamerica.com - Partial block, site works but impossible to log in. returns "We did not recognize the Online ID you entered" for valid ID's
- https://bitcointalk.org/ - Registration may require up to US$5. [last check: 2015-01-04]
- https://www.bitstamp.net/ - "This request was blocked by the security rules." [last check: 2015-03-17]
- https://buttercoin.com/ - Block page: "VPN or Tor connections are prohibited." [last check: 2015-03-17]
- https://www.chase.com/ - Does not block Tor, but always asks for verification (email, text or phone call) when using Tor.
- https://www.tdbank.com/ - Blocks Tor, but doesn't always recognize Tor exit nodes. (Akamai) [last check: 2015-01-04]
- https://investor.vanguard.com - Blocks Tor - blank page, no error [last check: 2015-04-27]
Blogs ( by engine )
- http://rankexploits.com/ - "TOR detected" (ZB Block), blocks even after solving captcha. [last check: 2015-03-18]
Commercial
Business-to-User / Retail Shopping
- http://www.adverts.ie/ - TCP timeout (hosted by hosting365.ie) [last check: 2015-03-17]
- http://www.autozone.com/ - "Access Denied" (Akamai) [last check: 2015-03-17]
- http://www.bestbuy.com/ - "Access Denied" (Akamai) [last check: 2015-03-17]
- http://www.bn.com/ - "The requested URL was rejected." [last check: 2015-07-04]
- http://www.daft.ie/ - TCP timeout (hosted by hosting365.ie) [last check: 2015-03-17]
- https://www.expedia.com/ - "Access Denied" (Akamai) [Last check: 2015-03-17]
- http://www.fullsailbrewing.com/ - Blocked from non-exit relay IPs. [last check: 2015-02-08]
- http://www.kohls.com/ - "Access Denied".
Also from non-exit node.[last check: 2015-03-17; non-exits seem fine as of 2015-01-04] - https://www.napaonline.com/ - "Access To Website Blocked" [last check: 2015-03-18]
- https://www.officedepot.com/ - "We're Sorry. We are unable to process your last request" [last check: 2015-03-17]
- https://www.overstock.com/ - TCP timeout
- http://www.rent.ie/ - TCP timeout (hosted by hosting365.ie) [last check: 2015-03-17]
- https://www.staples.com/ - "Access Denied" (Akamai) [last check: 2015-03-18]
- https://www.stubhub.com/ - "Access Denied" (Akamai) [last check: 2015-03-18]
- https://www.ticketmaster.com/ - "Forbidden" [last check: 2015-03-18]
- http://www.retailmenot.com/ - "Request Forbidden - Access to RetailMeNot from your current location has been blocked [last check: 2015-07-02]
- https://www.victoriassecret.com/ - "File not found" - Gives error on all browsers, while being up on non-Tor associated IP. [last check: 2015-07-13]
- https://www.craigslist.org/ - "This IP has been automatically blocked. If you have questions, please email..." [last check: 2015-07-15].
- https://play.spotify.com/ - Partial block, for free accounts, site comes up but message states "Your country does not match the one set in your profile" Premium accounts work.
Business-to-Business / Commerce and Industry / Advertising
- Google Analytics - After login they can't grant access: "IP tied to OFAC list. http://www.ustreas.gov/offices/enforcement/ofac/". Tor relays affected, even ones in the US.
Computing / Technical
- Certain Apple.com sites:
- https://getsupport.apple.com/ - 'Access Denied. You don't have permission to access "http://getsupport.apple.com/" on this server.', blocks sporadically [last check: 2015-06-10]
- https://support.apple.com/ - 'Access Denied - You don't have permission to access "http://support.apple.com/" on this server.', blocks sporadically, block includes non-exit relay IPs. [last check: 2015-06-21]
- https://discussions.apple.com/ - "Access Denied" but sporadically blocking (Akamai) [last check: 2015-04-02]
- https://www.box.com/ - Can access the site but not login or sign up
- https://forum.cyanogenmod.org/ - "Sorry, you don't have permission for that!" [last check: 2015-03-11]
- https://github.com/ - Apparently blocks account creation via Tor (tested once [when? still valid?])
- https://www.linuxquestions.org/ - "Error 403", blocks registration through Tor, but claims to allow unblocking by logging in. [last check: 2015-01-04]
- http://www.manux.info/ - Votre connexion internet dispose d'une adresse IP interdite. Cela peut indiquer que vous utilisez un proxy web, ou une adresse IP listee comme malveillante aupres de nos serveurs.
- http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz and http://geolite.maxmind.com/download/geoip/database/GeoIPv6.dat.gz - The company MaxMind provides these databases for use in a GeoIP package that determines a user's IP geo-location. Tor-connected systems are unable to use it, receiving a "Forbidden" code. Maxmind says they can't be bothered to look into why these are blocked; they recommended StackOverflow.com for "technical support". In one correspondence they recommended changing host to geoip.maxmind.com as a workaround, but they also insist this is not the recommended location.
- https://bugzilla.mozilla.org/ - Blocks account creation via Tor (requesting an account via email still works)
- https://www.namecheap.com/ -
Blocked harshly by Cloudflare. If you're extremely lucky, you can access only 3 times.Serves you a Cloudflare captcha, you solve it, want to login, then it just returns "The password does not match the user account or the account does not exist. Please verify both the user name and password and try again." [last check: 2015-01-24] - https://pastebin.com/ - Certain exit IPs are blocked completely, even from reading the site. [last check: 2015-04-02]
- https://secunia.com/ - Forbidden! We have registered this IP Address (x.x.x.x) as being a robot. Secunia does not allow content leaching robots on our website thus this IP address has been banned.
- http://www.slingbox.com/ - TCP timeout [last check: 2015-03-24]
- https://statuspage.io/ - "Your IP address 81.89.96.89 has been flagged as a scanner. Scanners are not permitted. If you are seeing this message in error, please contact security@…." [last check: 2015-05-30]
- http://www.xprivacy.eu/ and https://crowd.xprivacy.eu/ -
Resource site for XPrivacy Android app: ironically blocks Tor and other "spammers" at firewall level; administrator refuses to allow Tor visitors even just to read the website. (ticket)It appears that the Tor block has been lifted--at least for reading privileges. It is not known whether writing privileges are possible over Tor, though writing is much less important. [last check: 2015-03-19]
Education
- http://www.disneyjunior.com/ - iPad and iPhone App IP blocked, "International Agreements/Cannot view outside the US". Customer service confirms IP is "Known Anonymizing Proxy Address". Blocks non-exit relay IPs.
- http://www.gotw.ca/ - "The requested URL was rejected." [last check: 2015-03-18]
- https://www.gutenberg.org/ - Error 403: "Don't use anonymizers, open proxies, VPNs, or TOR to access Project Gutenberg." (Most but not all exits) [last check: 2015-01-28]
- http://www.justanswer.com/ - "Access Denied" (Akamai) [last check: 2015-04-02]
- http://www.lirrhistory.com/ - "The requested URL was rejected. If you think this is an error, please contact the webmaster." [last check: 2015-04-28]
- http://www.ohsu.edu/ - Blocked from non-exit relay IPs. [last check: 2015-01-23]
- [http://www.planetary.org/ - Not Implemented Tor IP not allowed
- Wikimedia projects including https://wikipedia.org/ - Reading free and supported; can also edit, after email request
- http://wikitravel.org/ - TCP timeout, even from non-exit IPs [confirmation?]. [last check: 2015-03-18]
- http://arxiv.org/ - some operations sometimes result in an error, depending on your exit. For example, "Access Denied. Sadly, you do not currently appear to have permission to access http://arxiv.org/find. If you believe this determination to be in error, see http://arxiv.org/denied.html for additional information." [last check: 2015-08-05]
Forums / Imageboards
- http://4chan.org/ - "Permanently banned from all boards: Proxy/Tor exit node." - Read-only allowed, posting blocked.
- http://www.boards.ie/ - TCP Connection timeout (also bans known VPN services) [last check: 2015-01-04]
- http://www.askaboutmoney.com/ - Registration denied, nospam.
- https://drugs-forum.com/ - 403 returned when accessing any page [last check: 2015-04-27]
- http://www.albumartexchange.com/ - "www.albumartexchange.com is protected by BlockScript. Your request was blocked because you appear to be accessing this website from a Tor exit node." [last check: 2015-04-27]
- https://www.jeuxvideo.com/ - "Votre adresse IP a été bloquée." - Read-only, can't subscribe or log in. [last check: 2015-05-01]
- https://stackexchange.com/ and subservices like https://stackoverflow.com/ and https://tor.stackexchange.com/ - you can read questions, but doing a search sometimes results in: "Human Verification: Are you a human being? We apologize for the confusion, but we can't quite tell if you're a person or a script. Please don't take this personally. Bots and scripts can be remarkably lifelike these days!" with a Google captcha. It looks like the error page is always available at https://stackoverflow.com/nocaptcha. [last check: 2015-08-05]
Gaming
- http://www.gamefaqs.com/ - "Blocked IP Address - Tor Exit Node" [last check: 2015-03-18]
- Steam, Steam Community - Several reports of users having their accounts banned or restricted permanently, which generally means new products cannot be purchased and the person is no longer permitted to talk to friends or post in Steam discussions and boards. (references: 2015-03-15 and 2015-01-13)
- Steam Users' Forums - "Sorry. The administrator has banned your IP address." [last check: 2015-03-18]
Government services / Publicly-funded resources
- European Central Bank (ECB) - 403 (Akamai custom error); email support stopped replying [when?] at the mention of Tor, didn't (dis)confirm
- Estonian Police and Border Guard - TCP timeout [last check: 2015-03-17]
- https://www.senate.gov/ - Access Denied, also to all sites in 2ld. 2015-07-04
- Public national passenger and freight train operator in Italy - TCP timeout [last check: 2015-03-18]
- http://www.fisc.uscourts.gov/ - Ambiguous "404" when using Tor [last check: 2015-01-04]
- http://www.usmint.gov/ - Error This page can't be displayed.
- Wiener Krankenanstaltenverbund (Wien KAV) - TCP timeout [last check: 2015-03-18]
Clusters:
- Andalusian Regional Government of Spain (SANDETEL - AS34285, 217.12.16.0/20) - inaccessible via Tor (blocked on TCP/IP level -> timeout), even when accessing as non-exit (entry/middle) node. Many *.es sites are located there. A few examples:
Image Hosting
- https://imgur.com/ - "We're really sorry, but uploading from the Tor network has been disabled. Please disable Tor and try uploading again." Blocks uploading, allows browsing.
IRC / SIP / XMPP / "non-web" network communication services and messaging
For information specific to IRC, see Blocking IRC
- Skype - Login attempts via a Tor exit node are rejected (since 2013, see list and blog): load icon spins forever; experience shows it can take ~6 weeks for a new exit node to be blacklisted
Mail services
- https://gmail.com/ - Sometimes blocks POP3 via Tor (forces password changes/phone verification after "suspicious" logins)
- https://inbox.com/ - Browser: 'Connection was interrupted' for signup or login
- http://mailinator.com/ - TCP/80 connect timeout
- http://mail.walla.co.il/, http://mail.walla.com/ - Serves a 404 [last check: 2015-07-16]. Other subdomains such as http://news.walla.co.il/ are okay.
News media
- http://www.broadsheet.ie/ - TCP timeout [last check: 2015-03-18]
- https://www.foxnews.com/ - "Access Denied" (Akamai) [last check: 2015-03-18]
- http://hackernews.org/ - "Access denied." [last check: 2015-03-24]
- https://news.ycombinator.com/ - You can't create an account.
- http://boingboing.net/ - "Access denied." [last check: 2015-06-26]
Search engines
- https://www.google.com/ - Almost always shows a captcha before permitting searching. [last check: 2015-05-08]
- https://www.yahoo.com/ - Yahoo temporarily blocks IPs sending too many queries. No workaround provided.
Social networking
Communities / Friends / Interests
- http://www.avito.ru/ - Blank page.
- https://www.chess.com/ - "We were unable to create your account. Please contact support to resolve this issue."
- https://forums.freebsd.org/ TCP timeouts, explicit rejects (TCP RST) and even works sometimes. [last check: 2015-03-18]
- https://furaffinity.net/ Complete block. "Your IP address has been banned. Reason: Known TOR exit node." However, whatever list of exit nodes they're using seems to be pretty outdated, so it's very roughly 50/50 on whether you'll actually encounter that block or not.
- http://www.godlikeproductions.com/ - "Sorry, ip address has been banned"
- http://klinkk.com/ - "This request has been denied for security reasons. If you believe this was in error, please contact support."
- http://mibbit.com/ - Closing Link: IP Z:Lined Tor exit server detected. torexit.dan.me.uk
- https://www.pinterest.com/ - Error message after logging in. [when?]
- https://twitter.com/signup - "Signup Denied, use Android/iPhone app on your phone instead."
- https://yelp.com/ - "Sorry, you're not allowed to access this page." [last check: 2015-03-17]
- https://www.airbnb.com/ - Partial block. Impossible to log in, some pages return Error code: 503
Dating
- https://www.pof.com/ - Periodic process[please clarify] may delete after a while (hour to days) if geoIP does not match profile location, Deletes[what?] for other unknown reasons. Try contacting csr@… and post any results to tor-talk.
Professional
- https://linkedin.com/ - You need to pass an image test before login, after which a login email validation is required. Might block completely due to "unusual traffic from your network connection." [last check: 2015-03-18]
Sports
- http://www.fifa.com/ - "Access Denied" (Akamai) [last check: 2015-03-18]
- http://www.foxsports.com/ - "Access Denied" (Akamai) [last check: 2015-06-26]
Utilities ( Electric / Gas / Water / Telecom / TV / Internet )
Shipping
- http://www.ups.com/ - ERR_CONNECTION_TIMED_OUT
- http://wwwapps.ups.com/ ERR_CONNECTION_TIMED_OUT
Telecommunications
Open:
Blocked:
- https://www.whitepages.com/ - "Access To Website Blocked" (error code 456) upon search. [last check: 2015-03-18]
- https://www.phonedetective.com/ - "403 - Forbidden" upon accessing site sometimes [last check: 2015-07-07]
TV / Video
- https://www.directv.com/ - "Access Denied" (Akamai) [last check: 2015-03-18]
- http://www.hulu.com/ - Video playback is blocked even from non-exit relay IPs. [when?]
Wikis
- (No sites listed yet)
List of formerly listed services
These were formerly listed in the above list, but someone (you) found that they now seem to work "more often than not" and thus moved them here adding the move date (do not remove the original reason for listing). Once listed here, other readers will check them from time to time. If they are still blocking "more often than not", feel free to move them back into the lists above. If they've been on this list for over a year, feel free to remove them as apparently having been a temporary IP block, not a complete class-based (Tor/VPN/Proxy) block. Listings older than 3 months should probably be removed.
Format:
- [YYYY-MM-DD listed - URI - original reason, delisting notes]
- 2015-03-18 - http://www.cnm.edu/ -
Blocks Tor relay IPs, even non-exit relay IPs (connection never ends). [last check: 2015-01-04]Works fine 2015-03-18 - 2015-03-18 -
http://www.bbc.co.uk/iplayer/ = States not in the UK even from non-exit relay IPs. (BBC says they are trying to fix this problem since 10/2014 still not working 2/2015)It seems to work from UK-based exit nodes, which is actually surprising since it's trivial to "be" in the UK when you're using Tor. Then again, it's not like YouTube blocks Tor users despite the fact that Tor can be used to "be" anywhere and bypass regional blocks. It's probably in their best interest to not block Tor at least unless content providers become angry over regional bypassing. Perhaps we should have a new category just for content providers that are blocking for regional purposes and not for "security" reasons. - 2015-03-18 - http://wiara.pl
Gość Niedzielny — Polish Catholic newspaper and website.Works fine 2015-03-18 - 2015-03-17 - https://ixquick.com and https://startpage.com -
Sometimes presents captchas because of exit IPs (with or w/o JS blocked). Sometimes only selecting an exit relay in different geo-location, stops repetitive captchas after each search - from same tab.(doesn't appear to be happening anymore at least since the end of 2014) - 2015-03-17 - http://www.myhome.ie/ -
TCP timeoutWorks fine 2015-03-17 - 2015-03-17 - http://www.realtor.com/ -
"Blocked IP Address", unblockrequest@….Works fine 2015-03-17 - 2015-03-17 - http://www.tigerdirect.com/ -
"Blocked Request", siteissues@…?subject=Blocked+RequestWorks fine 2015-03-17 - 2015-03-17 - https://www.kayak.com -
Detected as bot after submitting query. No captcha. [last check: 2015-01-27]Captcha after attempting search but works fine 2015-03-17 - 2015-03-17 - http://facebook.com/ -
Login puts account in validation required mode, if no phone number associated, may lose forever.Facebook offers an "experimental" .onion since October 2014 so this should relieve problems, at least when accessing it from its onion address. - 2015-01-04 - http://www.navy.mil/ -
"Access Denied" 2015-01-12, Works fine 2015-02-11I could not connect on 2015-03-17, need confirmation for thisWorks fine 2015-04-02, only the "www" subdomain works - 2015-01-04 - https://www.healthcare.gov/ - Works fine 2015-02-11, 2015-03-17, 2015-04-02
- 2015-01-04 - http://www.catholic.com/ - Cloudflare captcha but works fine 2015-02-11, 2015-03-17, 2015-04-02
- 2015-01-04 - https://ello.co/ - Works fine 2015-02-11, 2015-03-17, 2015-04-02
- 2015-01-04 - https://www.geekculture.com/joyoftech/ - nothing wrong?, Works fine 2015-02-11, 2015-04-02
Attachments (6)
-
akamai.png (10.9 KB) - added by 3 years ago.
Akamai block page, 2015-10-22.
-
badbehavior.png (29.6 KB) - added by 3 years ago.
Bad Behavior block page, 2015-10-22.
-
blackbaud.png (1.9 KB) - added by 3 years ago.
Blackbaud block page, 2015-10-22.
-
bluehost.png (7.8 KB) - added by 3 years ago.
Bluehost block page, 2015-10-22.
-
cloudflare.png (13.1 KB) - added by 3 years ago.
CloudFlare block page, 2015-10-22.
-
distil.png (5.7 KB) - added by 3 years ago.
Distil "Access to Website Blocked" screenshot.
Download all attachments as: .zip