I suppose they could use a "spray and pray" attack on anyone using Tor, but that would be easily detected.