Hacker News new | ask | show | jobs
by boring_twenties 599 days ago
Well the obvious answer there is that port scans shouldn't be considered abuse absent other factors like rising to the level of a DoS.
3 comments

Exactly this. A single SYN or TCP connection doesn’t constitute abuse.

Unfortunately many people seem to think otherwise and will spaff abuse reports over an errant SYN packet

If you scan a bunch of my ports and you aren’t on my LAN then your IP gets banned (ignored) for a week.
Go for it. But I don't see the relevance to the comment you replied to?
Recon is the first step in an attack chain. So just ignoring it would let a lot of criminals operate without constraints.