<html><head></head><body>I understand the frustration. However, the only legal recourse is to block those attempts at your server. Any retaliatory action is both illegal and will violate the ToS of every ISP. There is no such thing as an Internet Stand Your Ground law.<br>
<br>
That said, you can set up a honeypot system and redirect all attacks to it. Or setup longer and longer delays in your firewall rules so every connection attempt takes exponentially longer to get the response back. <br><br><div class="gmail_quote">On December 31, 2014 11:06:27 PM EST, William Wylde <durtybill@gmail.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<p dir="ltr">I run a personal webserver on an isolated connection, and my logs reveal hundreds of failed log- in attempts (particularly from china). Nmap of the various ips reveal suspiciously open ports which make me think that the attacks may be coming from a zombie-box. I intensely hate bot-nets, and have developed a desire to track them and destroy as many as I can find- whomever is running them, thus I have recently installed kali in an openbox VM. Anybody have any experience with using kali in tracking and destroying such nets? </p>
<p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />Ale mailing list<br />Ale@ale.org<br /><a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a><br />See JOBS, ANNOUNCE and SCHOOLS lists at<br /><a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a><br /></pre></blockquote></div><br>
--<br>
Jim Kinney<br>
Linux Systems Analyst<br>
Physicist/Brewer<br>
<a href="http://jimkinney.us">http://jimkinney.us</a></body></html>