A story over at the CloudFlare blog states that it estimates 94% of Tor requests could be classed as “malicious”, in that it involves automated systems scraping email addresses for spam, testing for vulnerabilities etc.
There’s some really interesting stuff they’re doing when it comes to trying to preserve the anonymous nature of Tor for their protected sites, but still restrict access for bad actors, as well as possible directions this type of struggle might go towards.