[marginalia_nu]

VPS and VPN providers should be very mindful of their reputation in this regard. If they get a reputation as a "black hole" where complaints vanish and nothing ever happens, the effect may be that other customers start to find themselves blocked or throttled on a subnet level.

[eli]

I don’t know of any provider that would take action on reports of ssh scanning.

[sleepybrett]

I report them from time to time. I'm not sure why people don't take them seriously. If 500 people a day came up to your front door and tried the knob, hell maybe even tried a couple of keys in the lock... I'm pretty sure you'd be calling the cops.

[eli]

An ssh server isn’t really like a front door though. I don’t necessarily think attempting a random ssh server should be a crime.

I used to spend time on custom iptables scripts but came to the conclusion it’s much better to just architect things in a way where the bots and scanners can’t plausibly create a problem and then ignoring them.

[TechBro8615]

A little bird told me a story that AWS will forward abuse reports to customers performing outbound nmap scans.

[sleepybrett]

https://twitter.com/IamRageSparkle/status/128089153745134387...

[TechBro8615]

I don’t think anyone is about to block or throttle traffic from Cloudflare IP ranges.

[marginalia_nu]

Incoming connections? Why not. I have at times, it's pretty great.