I’ve put together a quick script for installing and performing some basic setup of Maltrail.
If you’ve never used it, it’s great for seeing all the traffic bouncing off an internet host.
It also ties the traffic to known troublemakers on the internet while providing tons of other information on source IP addresses which are sending traffic your way.
Definitely worth a look.
- Props to DigitalOcean
- Port Mirroring with Hyper-V
- A Simple IoT Test Environment
- Sony Compromise | A Few Thoughts
- Three Bitcoin addresses from WannaCry Ransomware