drew010

<p><a href="https://www.torproject.org/" title="Tor" rel="nofollow ugc">Tor</a> is an invaluable tool for protecting free-speech, privacy, and preventing surveillance but when abused it can protect the identity of malicious users and make tracking their activities more difficult.  “Hackers” might use Tor to run security scans on your website or spam websites with comments and fake registrations.</p>
<p>The purpose of this plugin is to give you the power to block certain Tor activity from your WordPress site.</p>
<p>Features include:</p>
<ul>
<li>Block Tor users from registering on your site</li>
<li>Allow Tor registrations, but flag them for review</li>
<li>Block logins from Tor (useful for preventing brute force attacks and securing your admin panel)</li>
<li>Block Tor users from posting comments to your site</li>
<li>Block spammy pingbacks & trackbacks from Tor IP addresses</li>
<li>Block Tor users from your entire WordPress site</li>
<li>Permit access after solving a CAPTCHA (requires hCaptcha for WordPress plugin)</li>
<li>Real-time blocking using the Tor DNS exit list service</li>
<li>Near real time blocking using a cached blocklist which can be updated every 10 minutes or more</li>
<li>Custom blocklist support.  Block IP addresses or host networks.</li>
<li>Statistics to show how many Tor actions have been blocked by this plugin</li>
</ul>
<p>This plugin is compatible with BuddyPress, the popular Login With Ajax plugin, and hCaptcha.</p>
<p>If there is a feature missing that you would like, request it!</p>
<p>If you opt to use the real-time blocking, each IP address looked up is cached for 5 minutes for efficiency.</p>
<p>The Tor IP lists that are downloaded only contain “exit node” IP addresses so it is relatively small and the list is searched using a binary search so the plugin is very fast!</p>
<p>This plugin also adds two shortcodes which can be used to display specific content to Tor or non-Tor users. Shortcode usage:</p>
<pre><code>[tor_users]Hi, I see you're using Tor.  I support privacy and free-speech too! Visitors not using Tor will not see this message.[/tor_users]
[non_tor_users]Defend yourself against tracking and surveillance. Circumvent censorship. Visit torproject.org to learn more. Visitors already using Tor will not see this message.[/non_tor_users]
</code></pre>
<p><strong>Support Tor</strong></p>
<p>Tor is a great thing.  If you agree, consider <a href="https://www.torproject.org/getinvolved/volunteer.html.en" rel="nofollow ugc">volunteering</a>, <a href="https://www.torproject.org/donate/donate.html.en" rel="nofollow ugc">donating</a> to the Tor project, or expand the Tor network by <a href="https://drew-phillips.com/tor-nodes/" rel="nofollow ugc">sponsoring a Tor relay</a> which will be maintained by the plugin author.</p>
<p><strong>Support this plugin</strong></p>
<p>The author of this plugin values Tor as well as the security of your website.  Considerable effort went into the development of this plugin as well as the code and infrastructure that provides you with the up-to-date exit lists.</p>
<p>You can support this plugin by installing it, rating it positively, <a href="https://drew-phillips.com/donate/" title="Donating" rel="nofollow ugc">donating</a> to the author, or <a href="https://drew-phillips.com/tor-nodes/" rel="nofollow ugc">sponsoring a Tor relay</a> which will be operated by the plugin developer in your honor.</p>


VigilanTor

Add a layer of security to your WordPress site with the ability to block Tor users from commenting, registering, logging in and more.

Proxy &amp; VPN Blocker

<h4>Block VPNs, Proxies, Tor & Spam – Strengthen Your WordPress Security</h4>
<p><strong>Proxy & VPN Blocker</strong> is a complete <strong>WordPress security plugin</strong> designed to protect your site from anonymous and abusive traffic.<br />
It functions as a powerful <strong>VPN blocker</strong>, <strong>proxy blocker</strong>, and <strong>Tor blocker</strong>, preventing unwanted visitors, spam bots, and fake users from accessing your site.</p>
<p>Using the trusted <a href="https://proxycheck.io" rel="nofollow ugc">proxycheck.io</a> API, it detects connections from VPNs, open proxies, Tor nodes, and compromised servers — giving you real-time protection without slowing down your site.</p>
<p>Perfect for login, registration, comments, or any page you want to secure, Proxy & VPN Blocker also includes smart <strong>spam protection</strong>, geoblocking, and IP logging to help you stay in control of who can access your WordPress site.</p>
<p>Whether you’re running a blog, store, or membership site, this plugin helps keep out fake users, block risky regions, and stop automated spam attempts before they start.</p>
<h4>Key Features</h4>
<ul>
<li>Powerful WordPress security plugin – blocks VPNs, proxies, Tor, Mysterium nodes, and compromised servers in real time  </li>
<li>Country blocking & geoblocking – allow or deny traffic by country or region with flexible IP-based controls  </li>
<li>Supports IP ranges, CIDRs, specific IPs, and ASNs for precise network-level blocking  </li>
<li>Optionally use proxycheck.io’s Risk Score for smarter VPN and proxy detection decisions  </li>
<li>Built-in API Key Statistics with live usage graphs and daily query totals  </li>
<li>Visitor Action Log – view blocked IPs, detection reason, and plugin response directly in your dashboard  </li>
<li>Caches known good IPs to reduce API usage and improve performance  </li>
<li>Works seamlessly with both IPv4 and IPv6 addresses  </li>
<li>Compatible with Cloudflare and other CDN headers for accurate IP detection  </li>
<li>Block access to Login, Registration, Admin, Comments, or any page/post easily  </li>
<li>Customize the “Access Denied” message or redirect visitors to a specific page  </li>
<li>Log registration and recent login IPs in the Users list and profile – linked to proxycheck.io’s Threats page  </li>
<li>Manage proxycheck.io Whitelist and Blacklist directly from WordPress  </li>
<li>Simple integration via WordPress Editor and Toolbar for page-level protection  </li>
<li>Lightweight, fast, and built to complement other security plugins  </li>
</ul>
<p>And much more available in <a href="https://proxyvpnblocker.com/premium" rel="nofollow ugc">Proxy & VPN Blocker Premium</a>!</p>
<h4>The proxycheck.io API</h4>
<p>This Plugin can be used without a proxycheck.io API key, but it will be limited to 100 daily queries to the API. To enhance the capabilities, you can obtain a free API key from proxycheck.io, which allows for 1,000 free daily queries, making it suitable for small WordPress sites.</p>
<p>Here’s an overview of the free and paid API options:</p>
<ul>
<li>Without an API key (100 queries/day)</li>
<li>With a free API key (1,000 queries/day – ideal for small sites)</li>
<li>With a paid API key (10,000 to over 10 million queries/day)</li>
</ul>
<p>Your API key can be used across all of your sites and apps, you only need a proxycheck.io plan that fits your overall needs.</p>
<h4>User IP Logging Feature</h4>
<p>Proxy & VPN Blocker allows for local logging of user registration IP addresses. The IP addresses are displayed next to each user in the Users list and on their profile pages, visible to administrators. The Plugin also logs the most recent login IP address for each user, which is also displayed in the User’s list and profile page, with the IP address linked to the proxycheck.io Threats page.</p>
<h4>Caching Plugin Notice</h4>
<p>If you’re using caching plugins (like WP Rocket or WP Super Cache), IP-based page blocking might not function correctly due to static caching. A DONOTCACHEPAGE option is available to help mitigate this issue.</p>
<h4>Privacy & GDPR Compliance</h4>
<p>To check IP addresses, the plugin sends them to the proxycheck.io API. No personally identifiable information (PII) beyond the IP is transmitted. For details, refer to proxycheck.io’s <a href="https://proxycheck.io/privacy" rel="nofollow ugc">privacy notice</a> and <a href="https://proxycheck.io/gdpr" rel="nofollow ugc">GDPR Compliance</a> for further information.</p>
<h4>Disclaimer</h4>
<p>This Plugin is <em>not developed by proxycheck.io</em> despite being recommended by them.</p>
<ul>
<li>For plugin-related support, please use the WordPress.org support forum.</li>
<li>For API or account questions, contact proxycheck.io directly.</li>
<li>The proxycheck.io logo is used with express permission.</li>
</ul>


Proxy & VPN Blocker


Have used this plugin for several years and seen it regularly block malicious users. It takes a little effort to setup as per your requirements, but can be very useful if you need to block certain countries, proxies and/or VPNs. 


Proved useful over years

Block VPNs, proxies, Tor, and spam on WordPress. Strengthen security and stop fake users with smart IP blocking via proxycheck.io.

VigilanTor vs Proxy & VPN Blocker