Allow for login through TOR while preventing brute force/distributed password attacks?

I am making a website with the goal of blocking bots that are trying to login from different IP addresses constantly… while still allowing regular users to login via TOR.
One of the approaches to preventing distributed password cracking … Continue reading Allow for login through TOR while preventing brute force/distributed password attacks?