Tor relay and exit IPs are public. You can find them and then use them to watch for Tor traffic in your own infrastructure.