Subject: Re: [[email-masked]: abusive traffic from inter-touch router]
From: "Willie Tan" <[email-masked]>
To: <[email-masked]>
Date: Mon, 2 Sep 2002 08:02:37 +0800

Hi Mr Jun-ichiro itojun Hagino,

The tcp activity that you detected on port 6000 is actually generated by our
server to detect whether the machine is still running.

> ----- Forwarded message from Jun-ichiro itojun Hagino
> <[email-masked]> -----
>
> To: [email-masked], [email-masked],
>         [email-masked], [email-masked]
> Subject: abusive traffic from inter-touch router
> X-Template-Reply-To: [email-masked]
> X-Template-Return-Receipt-To: [email-masked]
> X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD  90 5F B4 60 79 54 16 E2
> From: Jun-ichiro itojun Hagino <[email-masked]>
> Date: Sun, 01 Sep 2002 15:54:46 +0900
>
> 	i'm now staying at Stamford hotel near Sydney airport, and using
> 	your internet connectivity service.  the first-hop router
> (61.8.9.254)
> 	is sending malicious TCP traffic (SYN attempt to port 6000).
> 	could you let me know (1) if it is intentional or not, and (2) if
> 	intentional, let me know under what kind of ground you are
> portscanning
> 	your customer.
> 	if you do not respond in 24 hours, i'll make this matter public.
>
> itojun
>
> ----- End forwarded message -----