Apache automatic shutdown

My VPS is running on CWP 0.9.8 and AlmaLinux 9.5. It has been running for several months, and everything was working fine before, but now Apache often stops automatically. When Apache stops automatically, I see the following entries in the error log

[Tue Nov 25 03:15:10.714565 2025] [ssl:warn] [pid 2664906:tid 2664906] AH01909: webmail.mydomain.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Nov 25 03:15:10.717558 2025] [mpm_event:notice] [pid 2664906:tid 2664906] AH00489: Apache/2.4.62 (Unix) OpenSSL/3.2.2 configured -- resuming normal operations
[Tue Nov 25 03:15:10.717580 2025] [core:notice] [pid 2664906:tid 2664906] AH00094: Command line: '/usr/local/apache/bin/httpd'
But the subdomain webmail.mydomain.com does not exist, and I haven't applied for an SSL certificate for this domain either.

And
It will also automatically stop when someone scans.
[Sat Nov 01 20:45:25.167806 2025] [:error] [pid 1265937:tid 1265968] [client 78.153.140.178:33986] File does not exist: /usr/local/apache/htdocs/app_dev.php
[Sat Nov 01 20:45:33.113079 2025] [:error] [pid 1266039:tid 1266056] [client 78.153.140.178:45744] File does not exist: /usr/local/apache/htdocs/test.php
[Sat Nov 01 22:13:54.412442 2025] [:error] [pid 1265937:tid 1265954] [client 78.153.140.176:46702] File does not exist: /usr/local/apache/htdocs/app_dev.php
[Sat Nov 01 22:13:54.836213 2025] [:error] [pid 1257726:tid 1257748] [client 78.153.140.176:46728] File does not exist: /usr/local/apache/htdocs/pinfo.php
[Sun Nov 02 02:00:58.269621 2025] [:error] [pid 1266038:tid 1266081] [client 78.153.140.203:52228] File does not exist: /usr/local/apache/htdocs/app_dev.php
[Sun Nov 02 03:44:08.863853 2025] [mpm_event:notice] [pid 1257719:tid 1257719] AH00492: caught SIGWINCH, shutting down gracefully


Please help！

If you don't use the webmail SAN, you should delete that configuration detail from the AutoSSL setup. (If you don't have a valid DNS A record or CNAME for it, uncheck "webmail" from the list of SANs -- as I do with the "cpanel" SAN.)

I checked, and I did not set up certificates for mail, webmail, ftp, or cPanel services. However, I still deleted the existing certificates and reapplied for my website (unselecting mail, webmail, FTP, or cPanel).

Let me see if this error occurs again.

CWP seems to produce that [ssl-warn] for any SAN you haven't enabled but it is just a warning & wouldn't be causing the restart. I also don't think your access attempts to /usr/local/apache/htdocs/ would do that either. Something is sending a SIGWINCH command to apache which is gracefully restarting as per its design.

I'd check your cron logs and/all other logs to see if you can find what is requesting it.

If that log you posted has accurate time stamps, the SAN notice comes in just after 3 am, which is expected because that's when the daily cron run happens, which includes AutoSSL renewal attempts (and subsequent graceful restarts).