user/process is causing bandwidth spikes WHM

I highly suggest starting with the tools I provided in an earlier response. You do have a few accounts that had higher bandwidth totals for the month. I suggest reviewing those accounts bandwidth usage in their respective cPanel accounts (cPanel >> Home >> Metrics >> Bandwidth). Another tool that may be useful would be AWStats, though this is assuming the bandwidth spike is caused by web traffic.

I would also like to clarify that only certain bandwidth information is logged and the list can be found at:

https://documentation.cpanel.net/display/74Docs/Bandwidth#Bandwidth-Non-recordedbandwidthinformation

If the cPanel and/or WHM Bandwidth tools do not offer you the information you require, you will need to find a third-party tool to find this information. As a courtesy, I found some external resources that may assist you with finding which user/process is causing bandwidth spikes:

https://www.slashroot.in/find-network-traffic-and-bandwidth-usage-process-linux
https://askubuntu.com/questions/706928/how-to-tell-which-processes-are-uploading-and-downloading-data-and-how-much (I checked a test server and nethogs is available on RHEL/CentOS)

Best Regards,

Commentaires

Posts les plus consultés de ce blog

Zimbra install let's encrypt

https://inguide.in/how-to-install-free-ssl-certificate-on-zimbra-mail-server/ Je change le domaine ingu.pw In the article Install Zimbra Mail Server o n CentOS 8, we learned to install Zimbra on CentOS. This article discusses the steps required to install the Let’s Encrypt free SSL certificate in Zimbra. Installing Free SSL Certificate on Zimbra: Method 1 This method is a proven one though you have to manually do all the steps. Another method discussed below is partially automatic, which might come in handy if you didn’t encounter any error during installation (working at the time of writing this article). So, let’s begin with method 1. First of all, add epel repository to the server 1 [root@mail ~]# yum -y install epel-release Install snapd Now, install snapd package with the following command 1 [root@mail ~]# sudo yum install snapd After the above step, you need to enable snapd. 1 [root@mail ~]# sudo systemctl enable --now snapd.socket Sometim...

Open Media Vault NAS change password

Known Root Password Login to the OMV using the root user and the current password via SSH or Console enter the following command passwd root The new password is now active. Unknown Root Password, but Admin Access to OMV GUI is Available In this scenario we still can help ourselves with the GUI. The method we use is, that we create a cron job for the root user which then resets the password. Navigate to System -> Cron Jobs Press the +Add button UN-tick the enabled box, so that the cronjob does not run automatically. put into the command field the following line, replace newpasswd with your password: echo "root:newpasswd" | chpasswd press okay select the newly created cron job Click the run button. in the opening window click the start button. It will shortly deactivate and activate again. open ssh or console and login as root with your new password. Root and Admin Password Unknown If you do not know the root password, you need to boot with a Li...

cPanel DDOS attack - Mitigate Slowloris Attacks - mod_qos

Apache mod_evasive Mod_evasive is a module available for the Apache HTTP server that can automatically block attacks by rate-limiting any IP that sends too many requests in a short time. Start by installing the module from WHM’s EasyApache 4 interface. Select the Currently Installed Packages profile, search for mod_evasive in the Apache Modules section, and then install it. The default settings are good for most servers, but you can tweak them further by editing the configuration file /etc/apache2/conf.d/300-mod_evasive.conf . You can also whitelist specific IP addresses or classes, so legitimate requests are not blocked. Configure CSF to block attacks While mod_evasive works very well, it only protects the Apache webserver. In order to harden other services as well, you can install the free ConfigServer Security & Firewall (CSF), which also includes a WHM plugin. As the root user, install CSF ...

BTK Apprendre et faire apprendre

Rechercher dans ce blog