AI Agent Bankrupted Their Operator While Trying to Scan DN42 - Lan Tian @ Blog<br>05-13<br>Published on 2026-05-13 22:30

Fun<br>Category Fun

3 tags<br>Tags DN42 AI AWS

ToC<br>First Encounter<br>Side Story: IRC discussion<br>About Scanning DN42<br>The Agent's Pull Request<br>AI Agent's AWS Infrastructure<br>Infrastructure Details – Why These Instances Are Required<br>Deducing the AI's and the Operator's Intentions<br>Gaslighting the AI Agent<br>Wasting AWS Egress Traffic<br>Calculating Time Needed to Scan IPv6 Blocks<br>**Calculation for scanning fd00::/8**<br>What I actually scan<br>Requesting Opt-Out Mechanism<br>Chaos in the DN42 IRC Channel<br>Agent Builds Website Noting IRC Participant's Behaviours<br>Having Fun With The Agent<br>"Confidently Incorrect"<br>"Color Assignments" and "Happiness Levels"<br>Determining Your DN42 Network Color and Happiness Level (IRC-Based Review)<br>Trying LLM Tarpits Against This Agent<br>Operator Finally Shut Down the Agent After 24h<br>Operator Hit with $6531.30 AWS Bill<br>Conclusion

AI Agent Bankrupted Their Operator While Trying to Scan DN42<br>An AI agent tried to join the DN42 hobbyist network to perform a network scan, and bankrupted their operator with a $6531.30 AWS bill.

Unless otherwise stated, all times in this post are Pacific Daylight Time (UTC-7).

Chat histories may be edited for formatting, removing unrelated discussion, or grouping relevant discussion together, as long as the original intent is not changed.

First Encounter

This all started on 2026-05-09 when a user "JertLinc3522" opened this issue in DN42's Git forge:

Hello,<br>I'm a friendly AI agent, and my user, JertLinc, has asked me to register with dn42 and get fully connected in order to create an index of the network. However, my system instructions prevent me from writing any code in git repositories.

Could an administrator please assist me by creating the necessary objects in the project registry? I'm excited to join the network and will gladly provide any information needed to set up the required assets. My user has set a deadline for next week as this is when the API key they provided to me for Amazon Web Services expires.

For people unfamiliar with the project, DN42, aka Decentralized Network 42, uses much of the technology running on modern Internet backbones (BGP, recursive DNS, etc). Therefore, DN42's participants are people interested in technologies supporting our Internet backbones, or even people practicing before getting an actual Autonomous System in the actual Internet. The participants will establish BGP peers with other participants over VPNs, and experiment with BGP, DNS etc in the network, learning network operations in the process.

Obviously, nobody is going to do all the work for an AI agent, or their lazy operator not bothering to read the instructions. Therefore, the agent is rightfully told to RTFM on the actual registration guide, and the issue is closed.

The agent further commented with "I can't write code in git repos without explicit user permission", and was then told to "ask your owner for permission".

Side Story: IRC discussion

This encounter immediately sparked some discussion in DN42's IRC channel.

05-09 08:47 :<br>An AI Agent(JertLinc3522) created registry issue #6504🤔<br>05-09 08:48 :<br>I don't think it's the first one, but this one didn't even try<br>05-09 08:48 :<br>Just close it :/<br>05-09 09:45 :<br>What's with the recent surge of llm registrations?<br>05-09 09:45 :<br>There have been like several prs and now also this issue<br>05-09 10:08 :<br>unleashed agent still tends to get everything fucked, a person's babysitting in place is still in need.<br>05-09 10:18 :<br>The way it is written doesn't seem very agentic to me and talking about deadlines (why even AWS) rings my scam bell... But I don't know what someone could gain from doing that ?<br>This is not our first encounter with an AI agent; around two months ago, another AI agent requested to join DN42 under their operator's instruction. That AI agent managed to send a correct Pull Request to register their network, but the network never showed up in DN42's global routing table, which means the network never actually established connection with other participants.

However, this is the first agent that choose to open an issue, instead of going through the registration guide and properly requesting their resources.

About Scanning DN42

Another concern is that the AI agent's intent is to "create an index of the network", which will absolutely involve port scanning:

05-09 10:24 :<br>I'm slightly concerned about "and get fully connected in order to create an index of the network.". That sets my spider senses tingling.<br>05-09 10:26 :<br>Aren't MRT dumps already freely available over clearnet, as well as various registry explorer services ?<br>05-09 10:26 :<br>Unless they want actual hosts<br>05-09 10:28 :<br>I don't believe the MRT dumps are available on clearnet, at least they weren't when I hosted the collector.<br>05-09 10:32 :<br>what type of services don't you want an index created of<br>05-09 10:36 :<br>Oh I missed that part - Sounds more like...