> If you want to get stricter only allow incoming connections from the trial user's IP to stop them hosting scam landing pages.

This could actually be the easiest way to deal with it. You can technically remove the block via system firewall, but I guess the abuse is only for cloud VMs that Elest.io provides and not the BYOVM ones, so you can use provider firewall rules to enforce the limit.