On a server of mine I've been noticing sporadic spikes in proftpd usage. When this occurs the server load jumps to over 100. Doing a "top" command I see most of the top processes are from Proftpd. I'm running cPanel on this machine and it's hosting hundreds of customers. How do I find out which account is responsible for this? The log file is spread out to every customer separately so I can't seem to figure it out.
