What do the IP addresses belong to? As in, are they data center IPs, or residential addresses?
Consider blocking all of Tor IPs, known data center ranges and the likes.