Tootfinder

tl;dr: Block logins from Tor Exit Nodes using Conditional Access
One thing we (as a community) lost when we started using IdP’s like #EntraID was the ability to easily block networks and IP addresses from accessing your login pages. The work-around with Entra is to create Conditional Access Network Locations along with a policy to block successful logins from those IPs and networks.