Sounds like someone running around with the Cisco IOS exploit from the ShadowBrokers dump. Best Korea has obvious motive, but it could also be random hackers running around hacking everything on shodan.