Re: [Pool] shodan.io actively infiltrating ntp.org IPv6 pools for scanning purposes

[Rob Janssen <pe1chl () amsat org>]

Ask Bjørn Hansen wrote:
> Hi Luca (and everyone),
>
> I removed those servers yesterday. Brad had been helping look to see if others were doing something similar.
>
> I think the behavior was falling well outside what's reasonably expected from a server operator participating in the 
> pool.
>
> The operator had also been adding the same server multiple times in order to "attract" more traffic which is definitely 
> outside the guidelines.

This guy has been doing other things that are not good net citizenship.
But it is not his agenda.  He is a black hat and he supports cracking.  Some people are like that.  Jerks.


Rob