"Sniffing some traffic showed that my nodes were receiving",
"invalid SYN/ACK and RST packets from the scanned targets.",
"This confirmed that someone was spoofing packets and using",
"Tor nodes' IPs as the source. Why? Well, I guess the aim",
"could be to hide the real source of the portscan or, in a",
"much more intriguing scenario, to cause a denial of service",
"on the Tor network, which is exactly what happened in my",
"case, as two of my VPS providers shut down and blocked some",
"of my servers immediately after receiving the abuse",
"notifications."
],"Office": "Foobar Hall 1.23",
"Phone": "+1 234 567 890",
"Email": "user@0domain.com"
],