I chuckle the most at the original twitter post from Greynoise :

"We have revoked the benign tag for OpenPortStats[.]com"

Did anyone actually think such a thing would be legitimate to start with? :) 

On Mon, Jun 24, 2019 at 12:26 AM Hank Nussbacher <hank@efes.iucc.ac.il> wrote:
On 24/06/2019 00:23, Randy Bush wrote:
> e.g. i am aware of researchers scanning to see patching spread and
> trying to make a conext paper dreadline this week or infocom next month.
>
> hard to tell the sheep from the goats and the wolf from the sheep.  i
> get the appended.  sheep or wholf?  i sure do not claim to be smart
> enough to know.  but i sure am glad others are </snark>.
Greynoise can be your friend:
https://greynoise.io/about
https://viz.greynoise.io/table

-Hank

>
> randy
>
> ---