How to Deny TOR user Access your Website

Tor users become risk for our servers as they can implement unethical practice into your website, server wihtout tracing as they are using tor routing.This method will allow you to block major list of tor users to access your website basically, our method will target the exit node and block it.


You will have:

  • Automated generator that do up-to-date tor ip’s
  • Enhance security using our customized .htaccess file
  • Refresh.php file that getting the up-to-date list from “Dan’s” list.

Download

git clone https://github.com/zayedaljaberi/block-tor-users/

installation

- Using FTP, SSH
- Using Cpanel
  • FTP Admin website can upload the files using ftp server of his website
  • Cpanel Admin user can upload the files using the cpanel given by the hosting company.

Usage

1- Upload the our .htaccess file (Make sure you only have one .htaccess) it’s always hidden so check your settings 2- Upload refresh.php file into directories that you the only one can access it (we advice to put it into multiple directories to enhance the security.) Example (www.domain.com/stop/tor/status/refresh.php
Markdown that admin website should visit refresh.php site every 30+ to get his list up-to-date. FYI. admin can create bash file to generate schedule for it.

Demo

Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

The Complete OSINT Tutorial to Find Personal Information About Anyone

This article mainly focuses on how to discover a person's digital footprint and gather personal data by using open-source intelligence (OSINT). So, in its...

How to find the password of hacked email addresses using OSINT

Open-source intelligence or OSINT is a potent technique, and it can give a lot of valuable information, if implemented correctly with the right strategy...

How to Identify Company’s Hacked Email Addresses Using Maltego & HaveIbeenPawned

This article is part of the Maltego OSINT tutorial, where you will learn to identify the already hacked account, and it’s password using the...

5 Key Vulnerabilities in Global Payroll

The cyber threat against payroll is growing in sophistication and frequency, according to the latest FBI cybercrime report. Many of these attacks exploit fixable...