It isn’t necessarily nefarious. Account signups, bill payments and any ‘commercial activity’ conducted from Tor exits receives additional scrutiny in the security and fraud teams of many companies. Known exits may also be blocked entirely.

Due to the nature of what Tor is and provides it’s unfortunately somewhat expected that bad behaviors happen significantly more from Tor exits than from users on an IP address from residential providers like Comcast.