Instructions I think how to block tor in /etc/csf/csf.blocklists by uncommenting this line (remove the #):
#TOR|86400|0|https://check.torproject.org/cgi-bin/To ... ip=1.2.3.4
and in /etc/csf/csf.conf make sure URLGET is set to use LWP then restart the firewall
We leave the ip=1.2.3.4 and don't change it to our server ip address?