dosprn

Thank you very much for your support. I'll try to enable my services again and monitor RAM load level.

Today, the problem is reoccurring. I noticed that the RAM overload reached 100% and disabled access to all scripts using "Deny from all". Left access only to static html. After that, the CPU load dropped to 0. But the RAM remains loaded at 80% for 7 hours.

Thank you. I disabled access with a Deny from all Now I suspect that finished PHP processes remain in memory for a very long time. Otherwise, I can't explain how the RAM continues to hold when CPU=0 for 3 hours.

Thanks for the recommendation. I would like to add that when contacting the server, in addition to checking the version, the current software status is also stored, which is very useful both for future user support requests and for calculating my statistics. If I get rid of this functionality, it will make support more difficult. I also want to note that the total number of these requests never exceeds 3,000 per day, which does not seem to be a significant overload. Interestingly, from the graph, after I completely disabled access to the service domains, the CPU load dropped to 0 instantly, but the RAM stayed at 100% for another 3 hours and only then dropped to 0. So it doesn't seem connected directly.

I regularly check the resource usage of my account and found that during the last 8 hours I have an overload of RAM. Before that, I carefully reviewed all the logs and denied access to all suspicious bots in .htaccess. After that, I disabled access to my service subdomains and the CPU load dropped to 0. But despite this, I still get 70-80MB of RAM usage. This will inevitably lead to the blocking of my account after a few hours, although I cannot influence the situation in any way. Please help me to solve the problem.

Thank you very much for your support. I will try to check the logs as often as possible and block suspicious bots. But such an attack can start unexpectedly during non-working hours, and after half a day the site can be blocked again. Is there any way to set up an alert that will send a warning e-mail in case of overload? This would make it possible to quickly respond to such attacks.

Thank you very much. What should be done now? Can you unblock the account and give Krydos a look at what's going on? Do I need to contact Krydos separately myself?

I apologize for the inconvenience, but my account is disabled again due to High Load. I really need your help to find out the cause of this problem. My account does not have any continuously running processes that could use a large amount of RAM. There are only a few PHP scripts that perform single MYSQL commands by HTTPS requests. The tables are optimized for these requests and should not load the system. After the previous incident, I looked through the logs and did not find any hint of the cause of the problem, and the memory usage was constantly at the level of 20-30Mb. Maybe there is an attack on my website that causes an unexpected increase in memory usage, but since I can't see the processes that are taking up too much memory, I can't find a way to solve the problem. Please unblock the account and help me solve the problem.

Thank you again. Unfortunately at this time, I cannot determine what could have caused the overload. My account doesn't run any ongoing or scheduled processes (except for daily account backups configured in Plesk). I also found no traces of suspicious activity in the logs. I will monitor the level of memory usage and contact you for help if this level unexpectedly reaches 100% again. Now, as far as I can see, it is within 20-40%.

Can I watch the CPU load from my Plesk account and/or can I determine which process was taking up 100% of the resource?

thank you very much. I'll look around the problem asap

Unexpectedly, my account was disabled due to exceeding the 24 hour limit of 100 GB memory or 10,000 CPU. I think that there was some error because my sites do not perform complex calculations and a large number of requests on the Internet. There have been no such incidents over the past years. Please unlock my account so I can check what might have happened and prevent it from happening in the future.

Thank you. Should it occur again, I will attempt to reissue the certificates myself.

Thank you very much for your assistance.