One other tip: Block all TOR exit node IP's. You'll find mostly fraud and spam coming from them. Deep down, I would love to support TOR in principle. I know th

One other tip: Block all TOR exit node IP's. You'll find mostly fraud and spam coming from them. Deep down, I would love to support TOR in principle. I know there are people living in oppressive regimes that need access to information. I want to support that side of TOR. In reality it's still the transport tunnel of choice for scammers and criminals. The costs just don't outweigh the benefits. Considering the CDNs that block TOR (Akamai, Cloudflare, Incapsula, etc), you wouldn't be the only one blocking TOR. I'd also throw in EC2, GCE, Azure, and Rackspace IP's too.