I know I did this the hard way, I'd like to see how you guys would approach the situation. 130 domains on your webserver, normal load of .50-.90 during the day. You're watching top and all of a sudden you see tons of apache processes/requests jump up that fill your whole screen, and mysql starts using 48% of the CPU. Load goes up to 12.. How would you track the problem user?
