Home / ubuntu / Questions / 1237434
In Process
Binary
Asked: 2020-05-10 03:33:37 +0800 CST

detect network malicious activity coming from own server

  • 772

I have a VPS provider that is strictly disallows malicious activity like ssh-bruting, ddos, and such.

I also have multiple users that use the single VPS machine, each allocated to one docker container.

The problem is I do not know if the users are doing anything malicious other than to check the CPU usage and do tcpdump.

Is there a program that listens on the network's outgoing that makes sure the users aren't doing anything malicious?

networking server network-monitoring

1 Answers

  1. Depending on what your notion of malicious activity is...

    You can still install and run nethogs in the background of each docker then check periodicaly an output files

    • 0