[ale] Kali linux

[Jim Lynch]

On 12/31/2014 11:06 PM, William Wylde wrote:
>
> I run a personal webserver on an isolated connection, and my logs 
> reveal hundreds of failed log- in attempts (particularly from china).  
> Nmap of the various ips reveal suspiciously open ports which make me 
> think that the attacks may be coming from a zombie-box.  I intensely 
> hate bot-nets, and have developed a desire to track them and destroy 
> as many as I can find- whomever is running them, thus I  have recently 
> installed kali in an openbox VM.  Anybody have any experience with  
> using kali in tracking and destroying such  nets?
>
>
I have used this list http://www.parkansky.com/china.htm to generate 
iptables rules to block all Asian sites, since I don't think any real 
users from there would be interested in my content.

Actually I merged it into my fail2ban rules if you need to know the details.

Jim.