Blocking Tor and IP ranges might be sufficient. CloudFlare might offer this as a service, but I'm not sure. I'd imagine using a third party would legally put you in the clear, but again IANAL