Outbound traffic from DMZ to TOR exit node IP

I am seeing Outbound traffic from a DMZ host to a TOR exit node IP. It’s a TCP connection attempt but denied by the Firewall. But I do not understand what to comprehend from this traffic or where I should direct my investigation. Any advice is appreciated.