[atlas] Possible software probe "farming" on AS47583

Totally agree with Grzegorz,

IMO we should avoid this kind of situations, there should be filters for this kind of probes and maybe, if the goal is farm credits, remove the credits obtained by these probes to prevent these situations from proliferating.

kix

On Monday, February 5th, 2024 at 22:05, Ponikierski, Grzegorz via ripe-atlas <ripe-atlas at ripe.net> wrote:

> I reported the problem in March 2022 but without good solution :/
>
> https://www.ripe.net/ripe/mail/archives/ripe-atlas/2022-March/004961.html
>
> Filtering out all software probes is not a solution because many of them are good and useful. We should have filters to filter out probes which are useless and are deployed only for farming purposes and here we have totally such case.
>
> Regards,
>
> Grzegorz
>
> From: ripe-atlas <ripe-atlas-bounces at ripe.net> on behalf of Randy Bush <randy at psg.com>
> Date: Monday, 5 February 2024 at 18:54
> To: Ben Cartwright-Cox via ripe-atlas <ripe-atlas at ripe.net>
> Subject: Re: [atlas] Possible software probe "farming" on AS47583
>
>> While doing some measurement work earlier this weekend I discovered
>>
>> that there are a large amount of probes on AS47583 that look like
>>
>> they are being set up to farm credits.
>
> seems silly, as all one has to do to get a jillion credits is asl on the
>
> mailing list
>
> randy
>
> --
>
> ripe-atlas mailing list
>
> ripe-atlas at ripe.net
>
> [https://urldefense.com/v3/__https://lists.ripe.net/mailman/listinfo/ripe-atlas__;!!GjvTz_vk!SDCX1ok7Fg4dHevsKnAsP6jnOnJYpKBHkT3XgSzeFCzXDPyVlJ59NDSYifR_pu5mr7XL9NCQCA$](https://urldefense.com/v3/__https:/lists.ripe.net/mailman/listinfo/ripe-atlas__;!!GjvTz_vk!SDCX1ok7Fg4dHevsKnAsP6jnOnJYpKBHkT3XgSzeFCzXDPyVlJ59NDSYifR_pu5mr7XL9NCQCA$)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/ripe-atlas/attachments/20240205/c8d6b6c7/attachment-0001.html>