Hi, I found one of the clients in our hosting system are trying to attack some other machines outside us. He sends out huge UDP packets and cause traffic jam. But from the packets I captured, I can only see it comes out from our cpanel(the IP address). How could I know who is doing this? We have more than four hundred clients.
