List Of Services Blocking Tor
PageOutline(2-3, Page Outline)
The Tor community maintains the following three lists (RBL blocks, Blocking software, and Individual blocks) as part of the DontBlockMe project. It is the opposite of the WeSupportTor project.
Glossary
- CDN - A Content Delivery Network: these are networks that websites use to serve high amounts of traffic to their clients. CDNs can be geographically distributed to provide "local" copies of web content to people worldwide.
- Exit relay - This is a Tor relay that exits traffic onto the plain Internet. All Tor traffic (though not when using onion services) appears to originate from these exit relays.
- Non-exit relay - A Tor relay that does not act as an exit relay. A non-exit relay does not originate any traffic other than to other Tor relays and thus there is no necessary reason for services to block traffic from them. Guard and middle relays are the two types of non-exit relays, and many non-exit relays act as both types at the same time.
- TCP RST - The TCP reset (or reject) is a way to gracefully close connections. Many services/software to block Tor traffic may block by explicitly closing the connection instead of ignoring the traffic.
- TCP timeout - A TCP timeout is another way to block Tor traffic on the protocol- or routing-level, however it involves silently ignoring the traffic instead of rejecting it.
List of RBL Blocking Services
An RBL is a "realtime blackhole list" which is a DNS query-based list used to tag IP addresses as being malicious or as being an origin of spam. Due to the inability to filter or monitor Tor user behavior across the entire network, many Tor exit relay IPs will be marked as threatening (even indiscriminately) which means many legitimate web surfers will be incidentally included in such blocks. This is a subproject to routinely search for and clear Tor relay nodes from RBL and RBL-like lists.
Format:
-
[URL] - Description of service/list, threat detection and consequences for Tor users
-
[https://www.abuseat.org/] - Composite Blocking List (CBL) - A Division of SPAMHAUS. By policy, TOR nodes cannot be removed from the CBL list. - Thus, the exact reason for being listed can no longer be established by the individual Tor .Exit Relay operator. Consequently, trying to effectively handle any 'abuse' issues being unfortunately perpetrated from an individual Tor .Exit Relay has become increasingly difficult or impossible when referencing this resource.
-
[https://akismet.com/] - Blog comment spam protection. (Note: Previously this entry was "askimet.com", a misspelled version of "akismet" that redirected to the official site. It is not known whether this was a typo or a malicious website. Edited 10/5/2016)
-
[https://www.blocked.com/] - Web request blocker against proxies and anonymity networks. The site itself is not available over Tor.
-
[https://blogspam.net/] - Blog and forum content spam protection.
-
[https://www.cloudflare.com/] - Announces itself as Cloudflare. Blog post on Tor: https://blog.cloudflare.com/the-trouble-with-tor/.
-
[https://www.dan.me.uk/dnsbl] - Blocklist designed to identify all Tor relays, even ones that do not exit traffic. There are both a list for exit relays as well as for all relays, though the provider does warn against using the list of all relays. The site itself is not available over Tor.
-
[https://www.incapsula.com/] - Announces itself as Incapsula. Blog post on Tor.
-
https://www.imperva.com/ - Announces itself as Personalized Security
-
[https://www.imunify360.com/] - Announces itself as "Imperva Cloud Application Security"
-
[https://www.norse-corp.com/] - Web and networking protection including IP blocking.
-
[https://www.projecthoneypot.org/] - Honeypot for e-mail harvesters by listing unique e-mail addresses on web pages.
-
[https://recaptcha.net/] - the CAPTCHAs given are, on occasion, very difficult and timed [last check: 2015-11-21]
-
[https://stopforumspam.com/] - IP-based blocking service based on forum and blog spam. The site itself is available from some Tor Exits, but not others (403 Forbidden). [last check: 2015-09-15, 1/10 Exits Blocked]
-
[https://en.wikipedia.org/wiki/Webroot] - Webroot, specifically their service BrightCloud(R) "Threat Intelligence" (brightcloud.com), provides block lists to customers that includes Tor middle nodes marked as "Proxy." [Last checked 2018-04-17]
List Of Software Used To Block Tor
A listing of the software that has been identified as being used by the services listed below. This can present via another avenue to accomplish the goals of the DontBlockMe project. The format is:
-
[URL] - How to identify the blocking software when used by a service
-
[https://akamai.com/] Fifa.com, tdbank.com, expedia.com, www.ecb.europa.eu, discussions.apple.com seem to be using Akamai and use some sort of configuration that blocks Tor (not all Akamai sites block Tor). Akamai blocks usually present with a basic page saying "Access Denied" and a 'reference' note like "Reference !#18 (closed)..." You can definitively confirm whether a site uses the Akamai CDN by running a WHOIS on the site's domain and looking for akam.net nameservers. Akamai report on Tor traffic.
-
[http://www.bluehost.com/] - Web hosting company. Block page has the phrase "If you feel this is in error please contact your hosting provider's abuse department".
-
[https://www.incapsula.com/] - Announces itself as Incapsula. Blog post on Tor: https://www.incapsula.com/blog/tor-does-not-equal-deny-access.html.
-
Convio/Blackbaud - A web host for various nonprofits. Blocks Tor specifically, returning an HTTP 501 error: "Not Implemented Tor IP not allowed". A traceroute leads to a subdomain of convio.net. http://www.adl.org/ is one affected site [last check: 2015-07-15].
-
Distil Networks - Anti-scraping company. Serves a captcha or block page with a form to request unblocking. Sample block pages: https://www.distilnetworks.com/distil_r_captcha.html, https://www.distilnetworks.com/distil_r_blocked.html, #Distil #Distil. Also at https://www.distil.it/. Blog post on Tor: https://resources.distilnetworks.com/h/i/246101200-cloudflare-vs-tor-is-ip-blocking-causing-more-harm-than-good/181642.
How to unblock Tor users
See: Best Practices. If you run a web site on Cloudflare, and you don't want Tor users to see captchas, then whitelist the "T1" country code in the Access Rules of the Cloudflare Firewall app. See this article for more information. The best option is not using Cloudflare at all. There are many alternative self-hosting options. See The Great Cloudwall for more information.
Ad-hoc Solutions for accessing blocked content on Tor
There are various ad-hoc ways by which Tor Browser users may access websites that block Tor. All of these solutions involve fetching content via other websites, a privacy tradeoff.
= Service = | URL | Comment | Allows embedded non-static content? | Allows PDF/.exe/mp3? |
---|---|---|---|---|
The Internet Archive's WaybackMachine | web.archive.org/save/_embed/<URL> |
Archive.org respects robots.txt restrictions, works best with JS enabled | No | Yes |
Archive.fo |
archive.fo/?run=1&url=<URL> And their official onion service: archivecaslytosk.onion/?run=1&url=<URL>
|
Ideal for news sites, doesn't require JS | No | No |
Google Cache | webcache.googleusercontent.com/search?q=cache:<URL without "http://"> |
Google sometimes blocks these requests | No - static only | No |
Startpage.com | (1) Find the URL by searching, (2) Click on the proxy option |
Not always efficacious | No | No |
Searx.me | (1) Find the URL by searching, (2) Click on the proxied option |
Not always efficacious | No | No |
Hypothes.is | via.hypothes.is/<URL> |
Behind Cloudflare | Yes | Yes |
Online Proxies | hide.me/en/proxy |
Yes | Yes | |
www.proxysite.com/ |
Yes | Yes | ||
www.proxysite.club/ |
Yes | Yes | ||
hidester.com/proxy |
JS disabled by default | Yes | Yes | |
youtubeunblocks.com/ |
JS disabled by default | Yes | Yes |
Other relevant services
-
To avoid captchas that are often required when visiting YouTube, use this. To avoid captchas that are often required when visiting YouTube, use
hooktube.com/
(behind Cloudflare recaptchas). -
imgur.com
blocks Tor uploads, to upload images on an imgur domain go to a stackexchange website (for exampletor.stackexchange.com
), click onAsk a Question
, use the image upload tooltip to upload the image, the resulting url will have ai.stack.imgur.com/...
form. -
If you want to know which site is harassing Tor users or behind CloudFlare, try using this search engine.
Field guide to common block pages
Akamai
Access Denied
You don't have permission to access "%websitename%" on this server.
Reference #[\d\.a-f]+
Akamai is a CDN.
Bad Behavior
Bad Behavior is an antispam PHP plugin.
Blackbaud
Not implemented Tor IP not allowed.
Blackbaud does web hosting for nonprofits.
Bluehost
Bluehost is a web hosting company. This seems to be their source code that is the source of the message: mod_rbld.
Cloudflare
Backward compatibility anchor for the old "CloudFlare" name.
One more step
Please complete the security check to access %websitename%
Cloudflare is a CDN acting as MITM by design, decrypting all TLS (HTTPS) traffic to plaintext and harming users privacy by (feature called flexible SSL) intransparently forwarding traffic from https end-user in plaintext to origin webserver most of time. See The Great Cloudwall.
Distil
Access To Website Blocked
Distil Networks is an anti-bot/anti-scraping company. They also have challenge pages that are less severe than this block page (which has status code 456).
imperva
%websitename% - Additional security check is required
Why am I seeing this page?
The website you are visiting is protected and accelerated by Incapsula. Your computer may have been infected by malware and therefore flagged by the Incapsula network. Incapsula displays this page for you to verify that an actual human is the source of the traffic to this site, and not malicious software.
What should I do?
Just click the I'm not a robot checkbox to pass the security check. Incapsula will remember you and will not show this page again. We recommend you run a virus and malware scan on your computer to remove any infection.
Powered by imperva
Imunify360
%websitename%
is protected by Imunify360
We have noticed an unusual activity from your IP %exitIP% and blocked access to this website.
List Of Services Blocking Tor
Services should be listed if:
- They display a written policy that prohibits "Tor" specifically by name.
- They display a written policy prohibiting proxies, VPNs, open/free networks, travelers, etc.
- The text of an error message indicates "Tor", anonymous proxies, etc.
- After testing with "signal NEWNYM / New Identity / MAPADDRESS", access and/or full use via Tor is found to be consistently problematic (defined as affecting at least 80% of all exits).
The list is formatted in alphabetical service groupings as follows:
- URL of service - nature of block: complete, account creation, read-only, random breakage, etc. [last check: ]
Attention: Please be aware, that this page itself ([https://trac.torproject.org]) does block Tor traffic for registration and editing by showing very hard to read captchas. Try: http://ea5faa5po25cf7fb.onion/projects/tor/register
The List
PageOutline(4-6, Category List, pullout, unnumbered)
The current list is as follows.
Banking / Finance
- [https://www.2checkout.com/] - the page https://www.2checkout.com/checkout/purchase gives "500 Internal Server Error" [last check: 2018-04-21]
- [https://personalsavings.americanexpress.com/] - timeout [last check: 2018-01-06]
- [http://www.bankia.es/] - Blank Page never loads [last check: 2017-12-25]
- [https://secure.bankofamerica.com] - Partial block, site works but impossible to log in. Returns "We did not recognize the Online ID you entered" for valid ID's.
- [https://www.bitpanda.com/] - One more step - Please complete the security check to access bitpanda.com (cloudflare) [last check: 2020-04-15]
- [https://bitcointalk.org/] - Registration may require up to US$5. [last check: 2015-01-04] "it is a known proxy/VPN/Tor exit node, so you are required to pay a small fee before you are able to post messages or send PMs. To atone, you must pay a total of 0.00084575 bitcoins If the fee is so small that your wallet is unable to send it, you can send any larger amount, though you will not be refunded the difference." [last check: 2020-04-24]
- [https://www.bitstamp.net/] - "This request was blocked by the security rules." [last check: 2020-03-14]
- [https://buttercoin.com/] - Block page: "VPN or Tor connections are prohibited."; Cloudflare 522 returned from the IP of a non-exit node [last check: 2015-09-17]
- [https://www.chase.com/] - Does not block Tor, but always asks for verification (email, text or phone call) when using Tor.
- [https://www.coinbase.com/] - "One more step - Please complete the security check to access" (Cloudflare) [last check: 2017-10-10]
- [https://www.commbank.com.au/personal/] and other Commonwealth Bank Australia help pages are blocked (Akami), but online banking at [http://netbank.com.au/] works fine. [last check: 2016-02-23]
- [https://www.lloydsbank.com/] - Sorry, an error has occurred. Error 1007 [last check: 2017-02-11]
- [https://www.mastercard.de/] - "Access Denied - You don't have permission to access "http://www.mastercard.de/" on this server." [last check: 2020-04-25]
- [https://www.patreon.com/] - "One more step - Please complete the security check to access" (Cloudflare) [last check: 2017-10-11]
- [https://santander.de/] - "Access Denied - You don't have permission to access "http://santander.de/" on this server." [last check: 2020-04-15]
- [https://www.sc.com/] - "Uh oh. As an anonymous user, your access to this network has been blocked. Requests from anonymous users using TOR (The Onion Router) IP addresses are routed through various networks and the identity of the original user cannot be traced, which is a security risk. If you are not using a TOR IP address and continue to receive this message, please get in touch with your local Standard Chartered contact centre." Status code 200. A direct link to the block page seems to be https://www.sc.com/global/error/AnonymousProxy. The block seems to use the same infrastructure as country-level blocking: editing the URL of an in included image leads to the page http://countryblock.standardchartered.com.edgesuite.net/SanctionedCountries/blocked_ctry/: "Uh oh. Standard Chartered Online Banking cannot be accessed from Cuba, N. Korea, Iran, Syria and Crimea/Sevastopol. If you are not in one of these countries and are getting this message, please contact your local Standard Chartered contact centre." [last check: 2018-03-27]
- [https://www.tdbank.com/] - Blocks Tor, but (as of 2015-01-04) didn't always recognize Tor exit nodes. As of 2020-03-14 blocks 10 out of 10 of exit nodes. (Akamai) [last check: 2020-03-14]
- [https://investor.vanguard.com] - Blocks Tor - blank page, no error [last check: 2015-04-27]
- [https://sberbank.ru] - Nullroutes every public node in directory, even those with "ExitPolicy reject :" [last check: 2017-10-22]
- [https://www.unicredit.it] - UniCredit S.p.A. allows login of middle operators, but blocks every operation of your online banking account. (SMS)"UniCredit informs that the operational activity of your Multichannel Bank has been blocked (COD.005). Please contact the number 800575757"
Blogs ( by engine )
- [https://www.donenright.com/] - timeout [last check: 2018-09-17]
- [http://www.mindtheheart.org/] - timeout [last check: 2018-04-26]
- [http://rankexploits.com/] - "TOR detected" (ZB Block), blocks even after solving captcha. [last check: 2015-03-18]
- [https://www.typepad.com/] (and subdomains) - Returns a custom 403 page, which is misleadingly labeled 404 [last check: 2016-06-05]
- [http://www.thebeatlesrarity.com/] - "Access has been blocked. Your IP [82.221.129.96] is found at Project Honey Pot . If you feel this is incorrect please contact them. Protected by: AVH First Defense Against Spam" try or region your IP address is in (TOR) from accessing this website."
Charity
- [http://fordfoundation.org/] - Cloudflare hard block (1009): "The owner of this website (www.fordfoundation.org) has banned the country or region your IP address is in (TOR) from accessing this website."
Commercial
Business-to-User / Retail Shopping
- [https://www.abebooks.com/] - Nginx 403 or custom 403: "Code 403: Access forbidden" [last check: 2017-03-21]
- [http://www.adverts.ie/] - TCP timeout (hosted by hosting365.ie) [last check: 2015-03-17]
- [http://alibris.com] - "This site has been blocked by the network administrator. Block reason: Gateway GEO-IP Filter Alert. IP address: 176.10.104.243. Connection initiated from country: Anonymous Proxy." [last check: 2017-03-21]
- [https://www.allmodern.com/] - "Access Denied" (Akamai) [last check: 2017-03-25]
- [https://www.applebees.com/] - "The owner of this website (www.applebees.com) has banned the country or region your IP address is in (TOR) from accessing this website." (Cloudflare) [last check: 2020-03-31]
- [http://www.autotrader.com/] - We're sorry for any inconvenience, but the site is currently unavailable. [last check: 2017-03-13]
- [http://www.autozone.com/] - "Access Denied" (Akamai) [last check: 2015-03-17]
- Baskin-Robbins (ice cream) - blocked with "Access Denied" (Akamai) [last check: 2016-12-12]
- Ben & Jerry's (ice cream) - blocked with "Access Denied" (Akamai) [last check: 2016-12-07]
- [http://www.bestbuy.com/] - "Access Denied" (Akamai) [last check: 2015-03-17]
- Breyer's (ice cream) - blocked with "Access Denied (Akamai)" [last check: 2016-12-12]
- [http://www.carsdirect.com/] - Blank Page never loads [last check: 2016-05-31]
- [http://www.cloudflare.com/] - "One more Step" proof: #32703 (moved) [last check: 2020-04-15]
- [http://www.daft.ie/] - TCP timeout (hosted by hosting365.ie) [last check: 2015-03-17]
- [https://www.delta.com/] - "Access Denied" (Akamai) [last check: 2017-07-16
- [https://www.dominos.com/] - Typically redirects to [https://www.dominos.com/index.intl.html], from which it is not possible to place orders for U.S. customers. [last check: 2019-11-27]
- [https://www.doordash.com/] - "error code: 400" [last check: 2020-03-14]
- [https://www.dunkindonuts.com/] - "Access Denied" (Akamai) [last check: 2019-09-26]
- [https://www.flashpoint-intel.com/] - Cloudflare hard block (Error 1009). [last check: 2017-05-26]
- [https://www.fossamail.org/] - "One more step - Please complete the security check to access" (Cloudflare)
- [https://www.hyatt.com/] - "Access Denied" (Akamai) [last check: 2016-07-13]
- [https://www.immonet.de/] - "Access Denied" (Akamai) [last check: 2020-04-21]
- [http://www.kohls.com/] - "Access Denied" (Akamai).
Also from non-exit node.[last check: 2015-03-17; non-exits seem fine as of 2015-01-04 (and 2015-09-17)] - [http://www.lg.com/] - "Access Denied - You don't have permission to access on this server." [last check: 2020-04-23]
- [http://www.lowes.com/] - "Access Denied" (Akamai) [last check: 2016-05-09]
- [https://www.lufthansa.com/] - Access Denied (Akamai). [last check: 2016-02-25]
- [http://www.nashbar.com/] - "Access Denied" (Akamai) [last check: 2016-05-31]
- [https://www.nike.com/] - "Access Denied" (Akamai) [last check: 2016-05-09]
- [http://nolo.com/] - "Unable to connect TCP Time-out" [last check: 2016-05-03]
- [http://nordstrom.com/] - "Access Denied" (Akamai) [last check: 2017-03-25]
- [https://www.officedepot.com/] - "We're Sorry. We are unable to process your last request" [last check: 2015-03-17]
- [https://www.overstock.com/] - TCP timeout
- [https://www.papajohns.com/] - "Papa John's Online Ordering can not take your order at this time due to technical difficulties." [last check: 2019-09-26]
- [https://www.qantas.com/] - "Access Denied" (Akamai), both HTTP and HTTPS - [last check: 2016-02-21]
- [https://order.redrobin.com/] - "The owner of this website (order.redrobin.com) has banned the country or region your IP address is in (TOR) from accessing this website." (Cloudflare) [last check: 2020-03-31]
- [http://www.retailmenot.com/] - "Request Forbidden - Access to RetailMeNot from your current location has been blocked" [last check: 2015-07-02]
- [http://www.riteaid.com/] - "Thank you we were not able to process your request" [last check: 2016-05-31]
- [http://www.samsung.com/] - "Access Denied - You don't have permission to access on this server." [last check: 2018-03-17]
- [http://www.sophos.com/] - "Access Denied - You don't have permission to access on this server." [last check: 2020-04-18]
- [http://www.sportsmansguide.com/] - Access Denied. (Akamai) [last check: 2016-06-30]
- [https://www.staples.com/] - "Access Denied" (Akamai) [last check: 2015-03-18]
- [https://www.starbucks.com/] - "We’re sorry — something has gone wrong on our end." [last check: 2019-09-26]
- [https://www.statefarm.com/] - "Error code: Technical Error 403. Support ID: 9566150499978592151." [last check: 2018-01-06]
- [https://www.stubhub.com/] - "Access Denied" (Akamai) [last check: 2015-03-18]
- [https://www.tacobell.com/] - "Access Denied" (Akamai) [last check: 2019-12-04]
- [https://www.taxact.com/] - Ignores traffic, even from non-exit relays - "ERR_CONNECTION_RESET" [last check: 2016-05-22]
- [https://www.techforless.com/] - redirects to http://www.techforless.com/blocked.html?from=index.html with a 200 status code. [last check: 2017-09-24]
- [https://tedscafe.com/] - "Your access to this site was blocked by Wordfence, a security provider, who protects sites from malicious activity." [last check: 2019-12-07]
- [http://www.realtor.com/] - "403 ERROR The request could not be satisfied." [last check: 2020-04-15]
- [http://www.tigerdirect.com/] - "Notice: Order Verification Required" [last check: 2020-04-15]
- [https://www.ticketmaster.com/] - "Forbidden" [last check: 2015-03-18]
- [http://www.totalwine.com/] - Application firewall error, Your request has been blocked. [last check: 2016-06-30]
- [https://www.ubereats.com/] - Works through picking a restaurant in Tor Browser (standard security level), but clicking on any item on a restaurant's menu has no effect. Looking at the JS console suggests the problem may be related to 3rd-party storage being blocked by Tor Browser. [last check: 2019-11-27]
- [http://ulta.com/] - "Your request has been blocked." [last check: 2017-03-25]
- [https://www.wayfair.com/] - "Access Denied" (Akamai) [last check: 2017-03-25]
Business-to-Business / Commerce and Industry / Advertising
- [https://www.bbb.org/] - Fake 500 Internal Server Error: "It's us not you." [last check: 2018-09-15]
- [http://www.bizjournals.com] - "Access to Website Blocked" (Distil). [last check: 2016-03-18]
- CrunchBase - "Access To Website Blocked" (Distil) - A database for TechCrunch, an online publisher of technology industry news. TechCrunch is not blocked. [last check: 2016-03-18]
- Google Analytics - After login they can't grant access: "IP tied to OFAC list. http://www.ustreas.gov/offices/enforcement/ofac/". Tor relays affected, even ones in the US.
- [http://manta.com] - "Access to Website Blocked" (Distil). [last check: 2016-03-18]
Classified Ads
- [https://www.craigslist.org/] - "This IP has been automatically blocked. If you have questions, please email..." [last check: 2017-02-08].
- [https://www.letgo.com/] - "Access Denied" (Akamai) [last check: 2017-02-08]
- [https://www.olx.com/] - "Access Denied" (Akamai) [last check: 2017-02-08]
Computing / Technical
- Certain Apple.com sites:
- [https://getsupport.apple.com/] - "Access Denied." (Akamai), blocks sporadically [last check: 2017-02-18]
- [https://support.apple.com/] - "Access Denied" (Akamai), blocks sporadically, block includes non-exit relay IPs. [last check: 2018-01-05]
- [https://discussions.apple.com/] - "Access Denied" but sporadically blocking (Akamai) [last check: 2017-02-18]
- [https://www.box.com/] - Can access the site but not login or sign up
- [https://git.openprivacy.ca/] - Can register over Tor but delete your account data without any warning
- [https://cryptovillage.org/] - timeout [last check: 2018-08-25]
- [https://action.eff.org/] - "403 Forbidden" (nginx) [last check: 2016-05-26]
- [https://www.linuxquestions.org/] - "Error 403" [last check: 2017-03-13]
- [https://apps.db.ripe.net/] - "ERROR:201, Sorry, access from your host has been permanently denied because of a repeated excessive querying." [last check: 2017-03-13]
- [http://www.emergingthreats.net] (Snort rules) - Redirects to https://www.proofpoint.com/emergingthreatsnet/, an Incapsula block page: "Error code 16. This request was blocked by the security rules." [last check: 2015-03-16]
- [https://flagfox.net/forum/] - "No soup for you! It looks like you have been flagged as a spammer."
- [https://github.com/] - Deletes the accounts created via Tor after some time with all associated information. And if you login to github via bad exit nodes unluckily, Github will flag your account.
- [ftp://ftp.gnu.org] - "425 Security: Bad IP connecting." https://ftp.gnu.org/ serves the same files and doesn't block Tor. [last check: 2017-07-27]
- [ftp://lists.gnu.org] - "425 Security: Bad IP connecting." [last check: 2017-07-27]
- [https://forums.informaction.com/] - the official forum of NoScript trolls the users trying to sign up via Tor with the message, that the recaptcha was incorrect (even if recaptcha gave the string the user have to paste into the box) [last check: 2015-11-21]. Note: The "cypherpunks" account was banned after I have signed in it through Tor (I haven't written anything using it, just tested, if it is present).
- [https://secure.instantssl.com/products/frontpage?area=SecureEmailCertificate] - Comodo Secure Email Certificate Application Form - "1User-Defined Exception An error occurred." after submitting the form. (Requires JavaScript enabled to submit.) - [last check: 2015-09-22]
- [https://support.lenovo.com/] - "Access Denied." (Akamai) [last check: 2018-03-17]
- [https://store.hp.com/] - "Access Denied." (Akamai) [last check: 2018-03-17]
- [https://www.linuxquestions.org/] - "Error 403" (Bad Behavior), blocks registration through Tor, but claims to allow unblocking by logging in. [last check: 2016-05-05]
- [https://talk.maemo.org] and [https://wiki.maemo.org] - blocked completely; discussion here - [last check: 2015-08-08]
- [http://www.manux.info/] - Votre connexion internet dispose d'une adresse IP interdite. Cela peut indiquer que vous utilisez un proxy web, ou une adresse IP listee comme malveillante aupres de nos serveurs.
- [http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz] and [http://geolite.maxmind.com/download/geoip/database/GeoIPv6.dat.gz] - The company MaxMind provides these databases for use in a GeoIP package that determines a user's IP geo-location. Tor-connected systems are unable to use it, receiving a "Forbidden" code. Maxmind says they can't be bothered to look into why these are blocked; they recommended StackOverflow.com for "technical support". In one correspondence they recommended changing host to geoip.maxmind.com as a workaround, but they also insist this is not the recommended location.
- [https://www.moonchildproductions.info/] - "One more step" (Cloudflare)
- Certain Mozilla & Firefox sites:
- [https://bugzilla.mozilla.org/] - Blocks account creation via Tor (requesting an account via email still works)
- [https://accounts.firefox.com/] and by consequence [https://addons.mozilla.org/] #16450 (moved) uses 3rd party cookies in a way torbrowser does not permit. By consequence login ("Invalid token") and password reset ("Reset password link expired" within two minutes) fail. Problem confirmed by friendly firefox.com sysadmins on channel #fxa of irc.mozilla.org. - [last check: 2016-01-11]
- [https://www.namecheap.com/] -
Blocked harshly by Cloudflare. If you're extremely lucky, you can access only 3 times.Serves you a Cloudflare captcha, you solve it, want to login, then it just returns "The password does not match the user account or the account does not exist. Please verify both the user name and password and try again." [last check: 2015-01-24] - [https://www.palemoon.org/] - "One more step" (Cloudflare) and the Palemoon developer is very anti-Tor.
- [https://pastebin.com/] - Certain exit IPs are blocked completely, even from reading the site. The unsecured version of the page ([http://pastebin.com]) also have Cloudflare wall.
works without any restriction [last check: 2017-02-18](not any more.) - [https://www.proofpoint.com/] - "Error code 15. This request was blocked by the security rules." [last check: 2016-06-04]
- [https://www.random.org/] - The site is very suspicious of Tor addresses: it always presents Cloudflare captchas, and requires multiple challenges to be solved in quick succession to verify the Tor user is human. The site can still be accessed if all the challenges are solved correctly. [last check: 2016-02-11]
- [https://secunia.com/] - "Forbidden! We have registered this IP Address (x.x.x.x) as being a robot. Secunia does not allow content leaching robots on our website thus this IP address has been banned."
- [http://www.slingbox.com/] - TCP timeout (including non-exit relay IPs) [last check: 2015-09-17]
- [https://statuspage.io/] - "Your IP address x.x.x.x has been flagged as a scanner. Scanners are not permitted. If you are seeing this message in error, please contact security@statuspage.io." [last check: 2015-05-30]
- [https://turbofuture.com/] - "403 Forbidden" (nginx) [last check: 2017-03-16]
- [http://www.xprivacy.eu/] and [https://crowd.xprivacy.eu/] -
Resource site for XPrivacy Android app: ironically blocks Tor and other "spammers" at firewall level; administrator refuses to allow Tor visitors even just to read the website. (github ticket)It appears that the Tor block has been lifted--at least for reading privileges. It is not known whether writing privileges are possible over Tor, though writing is much less important. [last check: 2015-03-19] - [https://cc.emsisoft.com/] and [https://www.emsisoft.com/] - "One more step Please complete the security check to access cc|www.emsisoft.com" (Cloudflare)
- [http://www.clamav.net/] - "One more step! Please complete the security check to access www.clamav.net" (Cloudflare)
- [https://freedns.afraid.org/] - You can create an account, but after several days he will lock your account without explanation. Login with Tor will trigger this tripwire.
Education
- [https://dl.acm.org/] - ACM Digital Library: "403 Error - Access Forbidden" "...we have temporarily restricted your access to the Digital Library. Your activity appears to be coming from some type of automated process. To ensure the availability of the Digital Library we can not allow these types of requests to continue. The restriction will be removed automatically once this activity stops." [last check: 2015-10-04]
- [http://www.apa.org/] - "Access To Website Blocked" (Distil) from 9/10 Tor Exits, including the oAmerican Psychological Association's journals. [last check: 2016-03-18]
- [http://attainmentcompany.com/] - Augmentative & Alternative Communication software & device maker; appears to be returning TCP Timeout for non-exit nodes. [last check: 2015-09-15]
- [http://www.austlii.edu.au/] - AustLII (Australasian Legal Information Institute) website refuses connections from Tor Exits, but other IP addresses work fine. "A joint facility of UTS and UNSW Faculties of Law" [last check: 2015-09-16]
- [https://cltc.berkeley.edu/] - various forms do an AJAX POST that appears to stall forever. In the background it is receiving a response with status 200: "Access Denied. You have been blocked due to suspicious activity. If you believe this is in error, please email help@ischool/>. Allow Request. You have been blocked from entering information on this blog. In order to prevent this from happening in the future you may ask the owner to add your network address to a list that allows you full access." When I emailed help@ischool about it, they cited the stopforumspam.com database as a reason for blocking the IP, and "considering that this is a cybersecurity website, it would not be a wise choice to unblock that IP address." [last check: 2016-01-28]
- [http://www.disneyjunior.com/] - iPad and iPhone App IP blocked, "International Agreements/Cannot view outside the US". Customer service confirms IP is "Known Anonymizing Proxy Address". Blocks non-exit relay IPs.
- [http://www.gotw.ca/] - "The requested URL was rejected."; TCP timeout returned to non-exit relay IP [last check: 2015-09-17]
- [https://www.gutenberg.org/] - Error 403: "Don't use anonymizers, open proxies, VPNs, or TOR to access Project Gutenberg." (Most but not all exits) [last check: 2017-03-13] For an alternative download site, try https://archive.org/details/gutenberg.
- [http://adsabs.harvard.edu/] - "ADS Access Denied" custom 403 that mentions Project Honeypot. [last check: 2017-09-13]
- [http://ibiblio.org/] and subdomains - timeout. [last check: 2017-01-07]
- [http://www.ieeelcn.org/] (IEEE Conference on Local Computer Networks) - timeout. [last check: 2016-05-24]
- [http://www.justanswer.com/] - "Access Denied" (Akamai) [last check: 2015-04-02]
- [http://www.lirrhistory.com/] - "The requested URL was rejected. If you think this is an error, please contact the webmaster."; TCP timeout returned to non-exit relay IP [last check: 2015-09-17]
- [http://www.msudenver.edu/] - timeout [last check: 2018-08-16]
- [http://sites.nationalacademies.org/] - timeout [last check: 2016-07-13]
- [http://www.ohsu.edu/] - Blocked from non-exit relay IPs. [last check: 2015-01-23]
- [http://www.planetary.org/] - Not Implemented Tor IP not allowed (Convio/Blackbaud) [last check: 2015-10-04]
- [http://www.popsci.com/] - "You are receiving this error message because your ip (x.x.x.x) is listed in the StopForumSpam.com database." [last check: 2015-11-25]
- [http://www.questbridge.org/] - QuestBridge homepage refuses connections from Tor Exits, but the "Apply" subpage blocks all Tor nodes.
- [https://study.com/] - "403 Forbidden" returned when accessing any page. [last check: 2016-09-29]
- Wikimedia projects including [https://wikipedia.org/] - Reading free and supported; can also edit, after email request
- [https://www.sciencedirect.com/] [last check: 2018-03-16] - Akamai.
- [https://web.archive.org/] - saving is prohibited with a deliberately ambiguous message "
Unknown Error
failed to archive the URL. specifics of failure is unknown
" (sic!).
Entertainment
- [http://www.gocomics.com/] - timeout [last check: 2018-01-29]
- [http://www.montypython.net/] - "Malicious activity has been detected from your computer or another computer on your network." Status line
HTTP/1.1 481 Request rejected due to security concerns. Please contact the website administrator for more information.
Offers a captcha and submits form to/?_xv_waf=challenge
. last check: [2017-03-27] - Block page provider isn't evident, but the block page of http://vtem.net/ shares the same recaptcha
data-sitekey="6LcGhiETAAAAANnZZKj2kQ3N5DSLOrG1agDFWkx7"
. - [https://noisetrade.com/] - blank response with status code 200. [last check: 2017-05-19]
- [https://www.rottentomatoes.com/] - Akamai. [last check: 2018-05-07]
- [http://www.simpsonsworld.com/] - Akamai. [last check: 2017-04-28]
Forums / Imageboards
- [http://4chan.org/] - "Permanently banned from all boards: Proxy/Tor exit node." - Read-only allowed, posting blocked.
- [http://www.albumartexchange.com/] - "www.albumartexchange.com is protected by BlockScript. Your request was blocked because you appear to be accessing this website from a Tor exit node." [last check: 2015-04-27]
- [https://arstechnica.com] "Uh oh - it looks like your IP address or email has been reported by another forum system as a source of spam. Ars Technica uses StopForumSpam to keep our forums and comments clear of unwanted solicitations and malware. In order to register as an Ars Technica user, you will need to first clear up the issue with StopForumSpam. You can do that by filling out their handy contact form and explaining your situation." [last check: 2016-04-29]
- [http://bash.org/] - timeout. [last check: 2016-12-18]
- [http://www.boards.ie/] - TCP Connection timeout (also bans known VPN services) [last check: 2015-01-04]
- [https://drugs-forum.com/] - "Error 403" (Bad Behavior) returned when accessing any page [last check: 2015-04-27]
- [http://www.funtrivia.com/] - "Access Denied: code FTTT" with status 200. [last check: 2017-11-26]
- [https://www.jeuxvideo.com/] - "Votre adresse IP a été bloquée." - Read-only, can't subscribe or log in. [last check: 2015-05-01]
- [https://www.juraforum.de/] - "Forbidden You don't have permission to access / on this server." [last check: 2020-04-16]
- [http://knowyourmeme.com/] - looks custom: "Your ip address 185.3.135.50 has been banned. If you think this is a mistake then please contact bans@knowyourmeme.com immediately and make sure to include your ip address." [last check: 2016-02-13]
- [=#marioboards][http://www.marioboards.com/] - connection timeout. Possibly related to [#mariowiki the www.mariowiki.com block] (which is also a timeout) [last check: 2016-12-16]
- [http://forums.scribus.net/] - "Error 403" (Bad Behavior) [last check: 2017-07-31]
- [https://forum.speeddemosarchive.com/] - nginx 403. [last check: 2018-01-02]
- [https://stackexchange.com/] and subservices like [https://stackoverflow.com/] and [https://tor.stackexchange.com/] - you can read questions, but doing a search sometimes results in: "Human Verification: Are you a human being? We apologize for the confusion, but we can't quite tell if you're a person or a script. Please don't take this personally. Bots and scripts can be remarkably lifelike these days!" with a Google captcha. It looks like the error page is always available at https://stackoverflow.com/nocaptcha. [last check: 2015-08-05]
Gaming
- [https://alphagamers.net/] - redirects to https://blocked.alphagamers.net/, a custom 200: "BLOCKED YOUR 7 PROXIES." [last check: 2016-08-01]
- [http://www.gamefaqs.com/] -
"Blocked IP Address - Tor Exit Node" [last check: 2015-03-18]Very recently GameFAQs appears to have explicitly lifted the block for visitors using Tor; sign-up and messaging is still prohibited (according to this page). [last check: 2016-02-20] - [http://www.go4go.net/] - "Sorry, 176.10.104.240 has been banned." Some exit nodes work. [last check: 2016-03-13]
- [https://megamanleaderboards.net/] - timeout [last check: 2018-10-23]
- [http://www.minecraftskins.com/] - "One more step" (Cloudflare) [last check: 2016-12-10]
- [https://www.nvidia.com/] - "Access Denied - You don't have permission to access "http://www.nvidia.com/" on this server." [last check: 2020-04-26]
- [http://hackernews.org/] - Cloudflare captcha presented [last check: 2016-01-30]
- [http://nintendo.com/] (and possibly all subsites?) - "This page can't be displayed. If you feel that you've received this message in error, please send the error ID to secalerts@noa.nintendo.com. The error ID is..." Status code 200. [last check: 2016-12-10]
- Steam, Steam Community - Several reports of users having their accounts banned or restricted permanently, which generally means new products cannot be purchased and the person is no longer permitted to talk to friends or post in Steam discussions and boards. (references: 2015-03-15 and 2015-01-13)
- Steam Users' Forums - "Sorry. The administrator has banned your IP address." [last check: 2017-10-11]
- [https://forums.nexusmods.com/] and [https://www.nexusmods.com/] - "Your IP was flagged"(registration denied) or "Your IP was banned"(can't access website)
- [http://www.modthesims.info/] - Generic nginx's "403 Forbidden" message. Blocking all Tor exit IP address.
Government services / Publicly-funded resources
- Wiener Krankenanstaltenverbund (Wien KAV) - TCP timeout [last check: 2015-03-18]
- Estonian Police and Border Guard - TCP timeout [last check: 2015-03-17]
- European Central Bank (ECB) - 403 (Akamai custom error); email support stopped replying [when?] at the mention of Tor, didn't (dis)confirm
- [https://www.expresstoll.com/] - Ignores traffic, even from non-exit relays - "ERR_CONNECTION_RESET" [last check: 2016-03-27]
- [http://anything.gov] All the GOV sites are blocking TOR - Time out exceeded 2016-05-03
- [https://www.healthcare.gov/] - "Access Denied" (Akamai) [last check: 2016-01-30]
- [https://www.senate.gov/] - "Access Denied" (Akamai), also to all sites in second-level domain. [first check: 2015-07-04; last check: 2016-09-19]
- [https://www.tra.gov.ae/] - timeout [last check: 2018-02-07]
- [http://www.fisc.uscourts.gov/] - Ambiguous "404" when using Tor [last check: 2015-01-04]
- [https://www.usmint.gov/] - "Error: This page can't be displayed." [last check: 2016-01-30]
- Public national passenger and freight train operator in Italy - TCP timeout [last check: 2015-03-18]
- [https://www.usps.com/] - "Access Denied" (Akamai) [last check: 2017-05-09]
Clusters:
- Andalusian Regional Government of Spain (SANDETEL - AS34285, 217.12.16.0/20) - inaccessible via Tor (blocked on TCP/IP level -> timeout), even when accessing as non-exit (entry/middle) node. Many *.es sites are located there. A few examples:
- [http://www.juntadeandalucia.es] [last check: 2017-12-25]
- [http://www.canalsur.es]
- [http://alhambra-patronato.es]
- [http://www.andalucia.org]
- [http://www.villasdeandalucia.com]
Health / Medical
- [http://www.everydayhealth.com/] - "Error: This page can't be displayed. Contact support for additional information. The incident ID is: N/A." [last check: 2017-01-17]
- [http://www.nejm.org/] (New England Journal of Medicine) - timeout. [last check: 2018-03-02]
- [https://secure.zilverenkruis.nl/PremieBerekenen/] (Zilveren Kruis Zorgverzekering) "ERR_CONNECTION_REFUSED". [last check: 2018-12-29]
Image Hosting
- [https://imgur.com/] - blocks viewing with a fake "Imgur is over capacity!" page. Blocks uploading with "We're really sorry, but uploading from the Tor network has been disabled. Please disable Tor and try uploading again." "Due to abuse, the Tor network is always blocked." [last check: 2018-08-30]
Jobs
- [https://angel.co/captcha/blocked/TBLKIP] - "Your IP address has been temporarily blocked for security reasons. Sorry for the trouble. If you have an AngelList account, try logging in. If you're on a VPN or other proxy, try disconnecting. If you're having persistent issues connecting to AngelList, please email team@angel.co with your name, your AngelList profile URL, and (optionally) your company name and telephone number. Error code: TBLKIP"
IRC / SIP / XMPP / "non-web" network communication services and messaging
For information specific to IRC, see Blocking IRC
- [https://kiwiirc.com/client] - "Error Connecting (DNSBL blocked (195.154.56.44))" [last check: 2016-03-09]
- [https://webchat.oftc.net/] - "== ERROR: Anonymous TOR usage is unavailable" [last check: 2016-03-09]
- Skype - Login attempts via a Tor exit node are rejected (since 2013, see list and blog): load icon spins forever; experience shows it can take ~6 weeks for a new exit node to be blacklisted
- irc.mozilla.org - "Looking up your hostname... You're banned! ERROR :Closing link: (unknown@...) [Z-Lined: Tor exit server detected]" [last check: 2017-01-11]
- [http://chat.efnet.org:9090/] - "*** Banned Temporary K-line 4320 min. - TOR exit node found. Visit http://rbl.efnetrbl.org/?i=93.115.95.201 for info. (2017/2/28 18.27)" [last check: 2017-03-01]
Mail services
- [https://gmail.com/] - Sometimes blocks POP3 via Tor (forces password changes/phone verification after "suspicious" logins)
- [https://inbox.com/] - Browser: 'Connection was interrupted' for signup or login
- [http://mailinator.com/] - TCP/80 connect timeout but works with SSL/TLS: use [https://mailinator.com/] instead
- [http://mail.walla.co.il/], [http://mail.walla.com/] - Serves a 404 [last check: 2015-07-16]. Other subdomains such as [http://news.walla.co.il/] are okay.
News media
- [http://www.broadsheet.ie/] - TCP timeout [last check: 2015-03-18]
- [https://news.ycombinator.com/] - You can't create an account.
- [https://www.popsugar.com/] - Blocks about 50% of the time. (Bad Behavior) [last check: 2017-03-25]
- [http://www.usnews.com] - "Access Denied" (Akamai) [last check: 2017-02-07]
- [https://www.theverge.com/] - "Forbidden" (custom 403). Can usually be worked around by doing "New Tor Circuit for this Site" a few times. [last check: 2018-04-19]
- [http://usnews.rankingsandreviews.com] - "Access Denied" (Akamai) [last check: 2016-05-31]
Professional
- [http://www.actorsequity.org/] - "This request is blocked by the SonicWALL Gateway Geo IP Service. Country Name:Anonymous Proxy." [last check: 2016-09-17]
Search engines
- [http://www.azlyrics.com/] - Site consistently is not accessible over Tor (TCP RST) for some unknown reason. This seems rather bizarre for a lyrics database site, assuming blocking the Tor connections is intentional. [last check: 2016-02-15]
- [https://tineye.com/] - "403 Forbidden, Your IP has been blocked from TinEye because it appears that you are not adhering to our Terms of Service." [last check: 2017-03-13]
- [https://www.ecosia.org/] - Returns "404 Not Found" but non-Tor IPs can access it.
- [https://www.google.com/] - Almost always shows the message "403. That’s an error. Your client does not have permission to get URL /sorry/IndexRedirect?continue=". Otherwise shows a captcha before permitting searching. In most cases after you have solved a captcha it will give you infinite chain of captchas. If the first attempt failed, change identity and try again. [last check: 2016-03-30]
- [https://www.yahoo.com/] - Yahoo temporarily blocks IPs sending too many queries. No workaround provided.
Social
- [http://atheologie.ca] and [http://atheology.ca] - Timeout. See #23246 (moved).
Social networking
Communities / Friends / Interests
- [https://www.airbnb.com/] - Partial block. Impossible to log in, some pages return Error code: 503
- [https://ask.fm/] - Shows sometimes "Access denied".
- [https://artofproblemsolving.com/] - "Loading failed for the