I've heard that many DOS attacks and general "black hat hacking" attempts occur over the TOR network. Is it possible for me to dynamically block source IP's by their presence in a BotNet or similar list?
How effective would this in thwarting DDoS or black hat/covert activities?
How would I implement such a solution? (I'm open to free or paid solutions here)
Assume that the users of this web site (or other network resource) should not be anonymous. This could either be by company policy, in the terms of service, etc.
This is an exercise in limiting risk for the service provider.