Security Hub

Bring your software development workflows to security

Tor Protection

TOR Protection

Signals & Triggers

On request
If IP is part of current TOR exit nodes list


  • block incoming http request Block incoming http request
  • Send a slack notification Send a Slack notification
  • Send an email notification Send an email notification
  • Custom action


This plugin allows users to monitor traffic from TOR and take actions when an incoming HTTP requests comes from TOR.

Advanced details

On every incoming HTTP request, this plugin checks whether a specific IP address is a TOR exit node.

It lookups the client IP address based on:

  • HTTP headers (x-forwarded-for, x-client-ip, x-real-ip, x-forwarded, x-cluster-client-ip, forwarded-for, forwarded, via).
  • remote connection IP address

If the IP is in the current TOR exit nodes list (updates every hour), then this plugin is triggered.

TOR connections can either be monitored or blocked.

Language support

  • Node.js
  • PHP
  • Ruby
  • Python
  • Java

Data collected by Sqreen

No data collected

On attack
  • Number of requests blocked

Build amazing products. Keep them safe.

Dive into Sqreen with our 14-day trial, and experience seamlessly security. Free Trial Request demo