[giantrobot]

So...drop 8.0.0.0/8 traffic and move on? Port scans happen all the time, some are malicious and others not.

[ronsor]

I don't think dropping traffic from roughly 1/200th of public IP space is a real solution.

[giantrobot]

Isn't it? If you don't need to accept SSH traffic from that block you can just drop it.