I worked in IT at a university about 15 years ago. As part of a research project I helped set up a Tor exit node. Within a few hours of it taking on traffic I was contacted by the universities IT security team. They were seeing all sorts of malicious traffic originating from that system and wanted to know what was going on. They had the system shut down immediately.