Do you block TOR access to your site

[Tracy]

I recently noticed that by far and away, the attack vector for my site via CloudFlare was showing up to be T1, which indicates a TOR exit node.
How many actually block ALL access from TOR nodes now since they are frequently used by hackers to try to hide their identity?

 

[Cedric]

We don't personally block them yet - However if we'd face something that might question this, I would block them.

If anyone would like to block them, here is a list of all Exit nodes: https://check.torproject.org/exit-addresses

 

[Tracy]

If using CloudFlare, it's a WAF option. They update their exit node list every hour from some reading I did.
They apparently also track the problem exit nodes and assign a higher priority to them for the WAF intercepts. It also depends on how you have your security range with them set.

 

[Kale]

I personally do not mind or care how you access my forum as long as you're not causing a scene or issues. I've seen some Discord servers use bots to ban VPNs and stuff though.

We don't personally block them yet - However if we'd face something that might question this, I would block them.

Yeah, agreed. Such as like somebody being a jerk DDoSing the site or using TOR/VPNs to get around a justified ban.

 

[Ravenfreak]

I don't block TOR access to my sites, but I wouldn't unless they start causing issues for my forums.

 

[Tracy]

Currently ALL TOR exit nodes that CF has listed have to go through a managed challenge (especially if it's listed in their no-no list). That should shut down most of the automated stuff... and it has been catching quite a few that required the intervention.

I started with it on CF as managed challenge... then went to no TOR exit node access for a few days then changed it back... and now it's back down to where it's not having an issue.
I have a feeling that a few "twits" over at a site that likes to bash folks may have been trying to play games.... so it may have shut that down fairly quickly since they have a harder time being anonymous and most are too cheap to pay for a VPN.

 

[Heatman]

I don't block TOR access to my sites, but I wouldn't unless they start causing issues for my forums.

As long as they are not causing any technical issues, there's no need to block them. But this means that you would have been on the look out for them all the time in order not to be caught off guard.