Whilst I understand that IP-based defence is quick and easy, I agree with nieldk that it is not the best option. The best defence would be behavioral based.
There is no point in trying to fight it by blacklisting tor, that is my point