Block Tor Exit Nodes with RdpGuard

Tor routes connections through a network of relays to help users protect their privacy. When a Tor user connects to your website or another public service, your server sees the IP address of a Tor exit node rather than the user's original IP address.

RdpGuard can block connections from known Tor exit nodes on your Windows server. Use this option when your access policy excludes Tor traffic, or when you want to stop repeated login attempts, scans or other unwanted requests arriving from Tor exit addresses. GeoIP filtering blocks these addresses without waiting for a failed-login threshold to be reached.

The Tor exit node list is updated automatically, so you do not need to maintain a manual blacklist. You can apply the restriction to all ports or only selected ports, for example those used by your website. Blocking is based on known exit IP addresses; it does not identify every possible use of Tor.

Blocking Tor exit nodes also prevents legitimate Tor users from connecting to the affected services. Consider whether that fits your website or server's access policy.

The steps below use GeoIP Deny mode. If you already use Allow mode, keep your existing policy and use the Tor and VPN exclusion setting described below.

1. Run RdpGuard Dashboard as administrator and click Tools, Options.

   

2. In the Options dialog, select the GeoIP tab.

   Check Enable GeoIP and select Deny connections from selected countries.

   

3. Click Add. The Add countries dialog will open.

   Scroll to Tor Exit Nodes (tor), select it and click Add.

   

4. Tor Exit Nodes (tor) will appear in the GeoIP list:

   

5. Click Save to apply your changes.

By default, Deny mode applies to all ports. To restrict Tor blocking to selected ports, open Settings, Deny mode on the GeoIP tab and adjust the Deny mode port settings. These settings apply to all entries in your GeoIP deny list.

If you already use Allow mode, open Settings, Allow mode and check Exclude VPN networks and Tor exit nodes from allowed connections. This excludes known VPN networks as well as Tor exit nodes from the allowed IP ranges. See Allow mode settings for details.