Website DDOS through tor network

stats: server logs and independent analytics on the website.
The website has little to none legit traffic. Bing and Google, all other bots are sort of blocked (sort of: robots.txt a few other bots besides Google and Bing are allowed, Yahoo, Yandex, Apple are blocked). This website was used with form spam, then the website was rebuild and put on other hoster and hosting.

New ip: https://check.torproject.org/torbulkexitlist
Framework: WordPress and no exploits, everything up to date, server up to date, virusdie firewall, server firewall the works.

The stats are 99% Tor traffic that is why I started this thread, most of the traffic is the homepage. Just a homepage visit and then nothing. No scrappers as far as I can see.

How can I stop this. Is the only solution blocking Tor (which I don’t want to do, because I love Tor). Is there any tooling that can connect to specific tor exit nodes and do this? I am looking for a solution. The browser is also different every time, so I can’t block a specific browser.

Please help me find a solution.