How to detect "runaway scripts" & high CPU users?
This is my first post here - haven't been a web hosting provider for long. Some of you might recognise me from webmaster-talk.
I run a free web-host, 1FreeHost.net. We're getting a few thousand hits per day, and 150+ signups per day.
The problem...
We're experiencing very high CPU usage, which is making the server incredibly slow. We run an Intel 2.8Ghz server - nothing cheap!
The CPU was averaging 40+, peaking at 80+. Support reckoned it was a DoS attack, and installed APF & BFD. The CPU load went right down to green.
However, today it's back up to 25+.
Although we have 700+ accounts, probably over 80% of them are inactive, and the rest of them aren't exactly high usage.
I've so far banned one user for running malicious, CPU intensive scripts - but I only picked him out by coincidence. We could have a few of these users that I don't even know about - and probably do.
Because we're a free host, it's not hard to ban users on the spot - if they're deliberately wasting resources, we can. Problem is, we can't detect them.
We're running WHM, and I've tried "Show CPU usage", etc. but there's nothing to identify dodgy users/scripts.
Is there anything (preferably for WHM, but not necessarily) I can use to identify these malicious users?
Thanks in advance for your time.
