Blocking Tor does not change the fact that you have an SQLi vulnerability (or whatever). The problem is not Tor but the logic that dictates it is easier and cheaper to ban a few IP addresses than to actually secure your shit.