Comment by mh-

Yeah, I have mixed feelings about CT (certificate transparency) for this reason. Folks are just consuming the firehose and scanning.

And in this case, if the thing you're funnel'ing is on your residential connection, it basically amounts to you summoning a DDoS.

One (obvious?) tip I'd offer is to put your stuff on high non-standard ports if you can. It'll reduce the amount of connections you get dramatically.