MyBB Community Forums

MyBB Community Forums > 1.8 Support > General Support > Fix error.log
Full Version: Fix error.log
You're currently viewing a stripped down version of our content. View the full version with proper formatting.

Mastersly

2020-03-08, 10:45 AM
I noticed that my error.log is getting bigger and bigger every day.
I delete it every day because it can be about 5 Gb, but its not a permanent solution. I want to fix those errors but i have no idead how to do that.
Some errors are appearing more than one time.
Can somebody help me to fix those error?
Should i post my error.log here?
Forum link:https://anonshare.eu/index.php

.m.

2020-03-08, 11:11 AM
visit server error log at your web host panel & paste some of recent entries here

AND
after deleting error log file, visit few pages of forum & simultaneously check size of error log
download it when its size is below 1MB, zip it & upload here so that someone can check ..

Mastersly

2020-03-08, 03:16 PM
server error log
2020-03-07 06:05:51	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 09:38:56	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:alert|eval|\\\\.fromcharcode)(?:\\\\(|`)" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/07_XSS_XSS.conf"] [line "82"] [id "212790"] [rev "4"] [msg "COMODO WAF: XSS Attack Detected||anonshare.eu|F|2"] [data "Matched Data: alert` found within REQUEST_URI: /0x01\\x22><imgsrc=xonerror=alert`hello`>\\x22>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "anonshare.eu"] [uri "/0x01\\"><img src=x onerror=alert`hello`>\\">"] [unique_id "XmNPkHUcrwA@P8g4XMfYGwAAAQo"], referer: http://anonshare.eu/0x01%22%3E%3Cimg%20src=x%20onerror=alert%60hello%60%3E%22%3E
2020-03-07 10:25:44	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 10:55:59	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 11:26:15	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 12:56:51	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 13:20:54	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:alert|eval|\\\\.fromcharcode)(?:\\\\(|`)" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/07_XSS_XSS.conf"] [line "82"] [id "212790"] [rev "4"] [msg "COMODO WAF: XSS Attack Detected||anonshare.eu|F|2"] [data "Matched Data: alert` found within REQUEST_URI: /0xb4d1d34'\\x22></title></style></textarea></script><script>alert`hello`</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "anonshare.eu"] [uri "/0xb4d1d34'\\"></title></style></textarea></script><script>alert`hello`</script>"] [unique_id "XmODltA6j2zx6arxNJYaNQAAAlw"], referer: http://anonshare.eu/0xb4d1d34%27%22%3E%3C/title%3E%3C/style%3E%3C/textarea%3E%3C/script%3E%3Cscript%3Ealert%60hello%60%3C/script%3E
2020-03-07 13:27:08	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 13:35:49	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<i?frame" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/07_XSS_XSS.conf"] [line "44"] [id "212280"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||anonshare.eu|F|2"] [data "Matched Data: <iframe found within REQUEST_URI: /1'\\x22><iframesrcdoc='<scriptsrc=\\x22data:text/javascript,alert(/hello/)\\x22></script>'></iframe>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "anonshare.eu"] [uri "/1'\\"><iframe srcdoc='<script src=\\"data:text/javascript,alert(/hello/)\\"></script>'></iframe>"] [unique_id "XmOHFT4uCZ-9BbRLAr2MSgAAAgA"], referer: http://anonshare.eu/1%27%22%3E%3Ciframe%20srcdoc=%27%3Cscript%20src=%22data:text/javascript,alert%28/hello/%29%22%3E%3C/script%3E%27%3E%3C/iframe%3E
2020-03-07 13:57:25	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 14:27:42	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 14:41:23	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/app/etc/local.xml"] [unique_id "XmOWc-i@Uo8d7B9X@I8IhwAAAcc"], referer: http://anonshare.eu/app/etc/local.xml
2020-03-07 14:41:24	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/store/app/etc/local.xml"] [unique_id "XmOWdPi@Uo8d7B9X@I8IiwAAAcg"], referer: http://anonshare.eu/store/app/etc/local.xml
2020-03-07 15:00:23	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".key/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||anonshare.eu|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anonshare.eu"] [uri "/anonshare.key"] [unique_id "XmOa55paE7CUNUJVxN@@7AAAAY4"], referer: http://anonshare.eu/anonshare.key
2020-03-07 15:00:24	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".key/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||anonshare.eu|F|2"] [data ".eu.key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anonshare.eu"] [uri "/anonshare.eu.key"] [unique_id "XmOa6O46ZyJYoX@WEcwQwgAAABE"], referer: http://anonshare.eu/anonshare.eu.key
2020-03-07 15:00:25	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".key/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||anonshare.eu|F|2"] [data ".eu.key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anonshare.eu"] [uri "/anonshare.eu.key"] [unique_id "XmOa6fi@Uo8d7B9X@I8UegAAAdo"], referer: http://anonshare.eu/anonshare.eu.key
2020-03-07 15:00:29	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".key/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||anonshare.eu|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anonshare.eu"] [uri "/privatekey.key"] [unique_id "XmOa7fi@Uo8d7B9X@I8UiQAAAdM"], referer: http://anonshare.eu/privatekey.key
2020-03-07 15:00:30	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".key/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||anonshare.eu|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anonshare.eu"] [uri "/myserver.key"] [unique_id "XmOa7vi@Uo8d7B9X@I8UigAAAcE"], referer: http://anonshare.eu/myserver.key
2020-03-07 15:09:17	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 15:39:32	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 16:04:39	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/.env"] [unique_id "XmOp9whnN4EpBQqu4XKNuwAAAh8"], referer: http://anonshare.eu/.env
2020-03-07 16:04:40	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/.env.dev.local"] [unique_id "XmOp@AhnN4EpBQqu4XKNwAAAAgY"], referer: http://anonshare.eu/.env.dev.local
2020-03-07 16:04:41	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/.env.development.local"] [unique_id "XmOp@QhnN4EpBQqu4XKNyAAAAhs"], referer: http://anonshare.eu/.env.development.local
2020-03-07 16:04:43	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/.env.prod.local"] [unique_id "XmOp@whnN4EpBQqu4XKNzQAAAhM"], referer: http://anonshare.eu/.env.prod.local
2020-03-07 16:04:44	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/02_Global_Generic.conf"] [line "122"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anonshare.eu"] [uri "/.env.production.local"] [unique_id "XmOp-PwLE0B4Fi8cml4VfAAAAAQ"], referer: http://anonshare.eu/.env.production.local
2020-03-07 16:09:47	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 16:32:36	Error	209.58.129.99	[client 209.58.129.99] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".conf/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||anonshare.eu|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anonshare.eu"] [uri "/vpns/cfg/smb.conf"] [unique_id "XmOwhPJBl7WO9AieJbfs7AAAAMo"], referer: http://anonshare.eu/vpn/../t/../vpns/./cfg/smb.conf
2020-03-07 16:55:39	Error	209.58.129.99	AH01797: client denied by server configuration: /var/www/vhosts/anonshare.eu/httpdocs/server-status, referer: http://anonshare.eu/server-status
2020-03-07 18:49:21	Error	204.12.208.154	[client 204.12.208.154] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/plesk.conf.d/modsecurity.conf"] [line "83"] [id "980001"] [rev "1"] [msg "Tophost Bot Rule: Black Bot detected."] [severity "CRITICAL"] [hostname "anonshare.eu"] [uri "/robots.txt"] [unique_id "XmPQkaAXIk8MbcfFe6eLLQAAAJs"]
2020-03-07 19:06:40	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 20:08:59	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 20:26:21	Error	79.129.20.22	[client 79.129.20.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\x22'\\\\/`]on[a-z]{1,}?\\\\/{0,}=" at ARGS_POST:message. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/07_XSS_XSS.conf"] [line "169"] [id "212760"] [rev "2"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.||anonshare.eu|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "anonshare.eu"] [uri "/newthread.php"] [unique_id "XmPnTZFz0weeZ@oDG1xflQAAAR0"], referer: https://anonshare.eu/newthread.php?fid=29
2020-03-07 21:45:19	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 23:09:42	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 23:09:54	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-07 23:09:57	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-08 01:04:53	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-08 01:25:39	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-08 01:35:00	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-08 02:41:47	Warning	208.46.106.5	mod_fcgid: stderr: PHP Warning: "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /var/www/vhosts/anonshare.eu/httpdocs/inc/tasks/delayedmoderation.php on line 112, referer: https://anonshare.eu/
2020-03-08 02:41:47	Warning	208.46.106.5	mod_fcgid: stderr: PHP Warning: "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /var/www/vhosts/anonshare.eu/httpdocs/inc/tasks/delayedmoderation.php on line 172, referer: https://anonshare.eu/
2020-03-08 02:41:47	Warning	208.46.106.5	mod_fcgid: stderr: PHP Warning: "continue" targeting switch is equivalent to "break". Did you mean to use "continue 2"? in /var/www/vhosts/anonshare.eu/httpdocs/inc/tasks/delayedmoderation.php on line 178, referer: https://anonshare.eu/
2020-03-08 08:55:59	Error	66.249.65.174	[client 66.249.65.174] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".com/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||www.anonshare.eu|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.anonshare.eu"] [uri "/youtube.com"] [unique_id "XmSW-3nu0Qcx7381Q690dQAAAc8"]
2020-03-08 09:05:24	Error	66.249.65.174	[client 66.249.65.174] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".com/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||www.anonshare.eu|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.anonshare.eu"] [uri "/twitter.com"] [unique_id "XmSZNOWaAFf4wV5csYuMQAAAAJw"]
2020-03-08 09:24:20	Error	66.249.65.178	[client 66.249.65.178] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".com/" at TX:extension. [file "/etc/httpd/conf/modsecurity.d/rules/comodo/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||www.anonshare.eu|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.anonshare.eu"] [uri "/facebook.com"] [unique_id "XmSdpHnu0Qcx7381Q6@GAwAAAc0"]
2020-03-08 14:10:28	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-08 14:56:36	Error	89.187.189.237	AH01797: client denied by server configuration: /var/www/vhosts/anonshare.eu/httpdocs/error.log
2020-03-08 15:10:22	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name
2020-03-08 17:06:41	Warning		AH01909: RSA certificate configured for anonshare.eu:443 does NOT include an ID which matches the server name


I visit only 2 pages and get all these errors (5mb)
I uploaded it on mediafire because i cant upload 5mb here

mediafire
https://www.mediafire.com/file/vg23yn4qp1rv6tq/error.rar/file

virustotal
https://www.virustotal.com/gui/file/78096321ae435b39c9de614b6445909f9f416e6bcb607894504788e4d59e2ba8/detection

.m.

2020-03-08, 03:41 PM
looks like most of logged errors are related to mod_security. contact your web host for its fixing.

[can't check error.log file at present ..]

Mastersly

2020-03-09, 03:32 PM
Okay I just disable modsecurity from my host and i will wait 2-3 days to see error.log again

.m.

2020-03-09, 04:03 PM
above given error.log file has references to last poster avatar plugin
explode() expects parameter 2 to be string, array given, inc/plugins/avatarep.php, 1367
exactly which version of the plugin you are using ?
similar errors were reported earlier [eg.]

Mastersly

2020-03-09, 08:49 PM
I had  3.0  and i unstalled it and install 3.0.3 because i views wasnt counting because of last poster avatar and guests avatar didnt worked. But i have the same problem too.
Here is my error.log after installing 3.0.3
https://www.mediafire.com/file/w6y3gjp5gnthqg9/error.rar/file
MyBB Community Forums > 1.8 Support > General Support > Fix error.log