Date: Wed, 27 Jan 2016 17:36:51 +0100 From: Rob Janssen <rob@...ware.nl.eu.org> To: Luca BRUNO <lucab@...ian.org>, pool@...ts.ntp.org, oss-security@...ts.openwall.com, linuxbrad@...il.com Cc: team@...urity.debian.org, secalert@...hat.com Subject: Re: [Pool] shodan.io actively infiltrating ntp.org IPv6 pools for scanning purposes Luca BRUNO wrote: > [cross-posted to pool-ntp and oss-sec] > > > For ntp.org admins: can those rogue server be expunged from the pools, and the whole > shodan.io situation clarified? shodan.io are the bad guys! block them wherever possible, put them in default blocklists suggested for firewalls, etc. these guys really don't care. when submitting networks for exclusion, they reply as if they will do something, sometimes the scanning may pause for a day or a week, then it always comes back. Rob
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ