It's more weird that people keep pretending they're not a honeypot even after they've started blocking port forwarding