How to identify account with highest load on your server

Often server administrators have problems to identify, which account is generating on server highest load.
Here are some tips how to identify such account:
First of all execute top command. You will see load on your server and processes, which use the most of the resources.If you will see, that there is too much httpd processes in same time running on your server, you can try to check which account generates so much requests by following commands. Commands will work just on servers with WHM server administration software!
1. Display top accounts, which generates highest number of http requests with number of requests:

/usr/bin/lynx -dump -width 500 https://127.0.0.1/whm-server-status | grep GET | awk '{print $12}' | sort | uniq -c | sort -rn | head

Example:

122 creactive.postaffiliatepro.com 40 prankdial.postaffiliatepro.com 19 loopmasters.postaffiliatepro.co 11 smoketip.postaffiliatepro.com 10 support.qualityunit.com 9 rouxbrands.postaffiliatepro.com 5 wellsprings-health.postaffiliat 4 ultimatelifespan.postaffiliatep 4 trefagyar.postaffiliatepro.com 2 wincav.postaffiliatepro.com

2. Display top urls, which are executed most often on your server across all accounts

/usr/bin/lynx -dump -width 500 https://127.0.0.1/whm-server-status | grep GET | awk '{print $14}' | sort | uniq -c | sort -rn | head

Example:

12 /scripts/clickjs.php 8 /accounts/default1/banners/01_macbeth_250_250.gif 7 /accounts/default1/banners/cs10best_2009_11_23(750x100).swf 6 /accounts/default1/banners/ms10best_2009_11_23(250x250).swf 5 /scripts/imp.php?a_aid=OR&a_bid=5cf11f7d&chan=colonzone 5 /accounts/default1/themes/affiliates/_common_templates/img/ 5 /accounts/default1/banners/ms10best_2009_11_23(468x60).swf? 5 /accounts/default1/banners/cs10best_2009_11_23(468x60)-1.sw 5 /accounts/default1/banners/cs10best_2009_11_23(120x600)-1.s 5 /accounts/default1/banners/468_60_Multi_Genre.swf?clickTAG=

3. Display top IP addresses, which are executing most of the http requests on your server

/usr/bin/lynx -dump -width 500 https://127.0.0.1/whm-server-status | grep GET | awk '{print $11}' | sort | uniq -c | sort -rn | head

Example:

      6 75.145.39.210
      4 72.234.60.199
      3 90.179.240.155
      3 88.146.78.52
      3 85.67.163.7
      3 68.111.119.213
      3 204.194.98.16
      2 95.103.45.22
      2 90.178.178.106
      2 90.177.179.143

How to identify account with highest load on your server

Other Articles