Security monitoring on a VPS
An internet-facing server with full visibility into who's trying to get in.
- Wazuh
- Firewall
- Dozzle
- Docker
Problem
A public server gets access attempts every day, and without monitoring nobody notices.
Solution
A firewall with only the essential ports open, Wazuh as a SIEM to detect intrusions and file changes, and Dozzle to see every container's logs in one place.
Result
Login attempts and automated scans are logged and raise alerts in real time.