[San-Diego-pm] Help!

Wed Jun 21 09:47:15 PDT 2017

I got in. Attached is a text file with 3 logs. Errors when it works. 
Errors when it doesn't work. And php errors; I don't use php.

It's all pretty much Greek to me.

-------

Physical issues prevented me from attending the last two meetings. I 
hope to attend the upcoming meeting.

=================================

On 6/20/2017 6:16 AM, Brian Manning wrote:
> On Mon, Jun 19, 2017 at 10:13 PM, Joel Fentin <joel at fentin.com> wrote:
>> The result is the same; a blank white screen. A control U displays:
>> <!-- SHTML Wrapper - 500 Server Error -->
>> as before.
> 
> The reason for the HTTP 500 error is most likely in the error logs for
> your hosting provider's web server.
> 
> If your hosting provider doesn't give you access to the error logs for
> your virtual host, I suggest switching to a hosting provider that does
> give you access, as access to the error logs is crucial for
> troubleshooting when there's issues with your CGI scripts, as you're
> now finding out.
> 
> Thanks,
> 
> Brian
> 
> 
> 

-- 
Joel Fentin       tel: 760-749-8863
Personal Website: http://fentin.com
-------------- next part --------------
The following is when the page is working right. That is to say when:
BEGIN{use CGI::Carp qw(carpout fatalsToBrowser);carpout(\*STDOUT);$|=1;}
is commented. There are more errors than shown.

[Wed Jun 21 10:21:07 2017] [error] [client 80.95.82.252] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 252.82.95.80.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.produkgreenworldasli.web.id"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBJQAAAFZ"]
[Wed Jun 21 10:21:07 2017] [error] [client 178.79.31.245] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 245.31.79.178.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.greenautomationltd.com"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBJYAAAFU"]
[Wed Jun 21 10:21:07 2017] [error] [client 80.95.82.252] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 252.82.95.80.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.produkgreenworldasli.web.id"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBJkAAAFL"]
[Wed Jun 21 10:21:07 2017] [error] [client 80.95.82.252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.produkgreenworldasli.web.id"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBJkAAAFL"]
[Wed Jun 21 10:21:07 2017] [error] [client 200.144.145.4] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 4.145.144.200.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "azulpacifico.cl"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBKIAAAFO"]
[Wed Jun 21 10:21:07 2017] [error] [client 200.144.145.4] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "azulpacifico.cl"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBKIAAAFO"]
[Wed Jun 21 10:21:07 2017] [error] [client 178.79.31.245] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 245.31.79.178.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.greenautomationltd.com"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBKMAAAFD"]
[Wed Jun 21 10:21:07 2017] [error] [client 178.79.31.245] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.greenautomationltd.com"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBKMAAAFD"]
[Wed Jun 21 10:21:07 2017] [error] [client 80.95.82.252] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 252.82.95.80.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.produkgreenworldasli.web.id"] [uri "/wp-login.php"] [unique_id "WUqc80KT9M4AAecMBKgAAAFU"]
[Wed Jun 21 10:21:08 2017] [error] [client 80.95.82.252] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 252.82.95.80.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.produkgreenworldasli.web.id"] [uri "/wp-login.php"] [unique_id "WUqc9EKT9M4AAeejBycAAABD"]
[Wed Jun 21 10:21:08 2017] [error] [client 178.79.31.245] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 245.31.79.178.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.greenautomationltd.com"] [uri "/wp-login.php"] [unique_id "WUqc9EKT9M4AAeejBykAAABA"]
[Wed Jun 21 10:21:08 2017] [error] [client 80.95.82.252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.produkgreenworldasli.web.id"] [uri "/wp-login.php"] [unique_id "WUqc9EKT9M4AAeejBycAAABD"]
[Wed Jun 21 10:21:08 2017] [error] [client 178.79.31.245] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 245.31.79.178.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.greenautomationltd.com"] [uri "/wp-login.php"] [unique_id "WUqc9EKT9M4AAeejBzQAAABO"]
[Wed Jun 21 10:21:08 2017] [error] [client 178.79.31.245] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.greenautomationltd.com"] [uri "/wp-login.php"] [unique_id "WUqc9EKT9M4AAeejBzQAAABO"]

The following is when it doesn't work. The line starting with BEGIN is uncommented. There are more errors than shown.

[Wed Jun 21 10:23:57 2017] [error] [client 117.253.235.120] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "www.operationransom.com"] [uri "/wp-login.php"] [unique_id "WUqdnUKT9M4AAAdc3IsAAABX"]
[Wed Jun 21 10:23:57 2017] [error] [client 5.28.163.95] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 95.163.28.5.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.womensfitnesschino.com"] [uri "/wp-login.php"] [unique_id "WUqdnUKT9M4AAAdc3KYAAABE"]
[Wed Jun 21 10:23:57 2017] [error] [client 5.28.163.95] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.womensfitnesschino.com"] [uri "/wp-login.php"] [unique_id "WUqdnUKT9M4AAAdc3KYAAABE"]
[Wed Jun 21 10:23:58 2017] [error] [client 5.28.163.95] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 95.163.28.5.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.womensfitnesschino.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAdc3LMAAABW"]
[Wed Jun 21 10:23:58 2017] [error] [client 168.167.86.83] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 83.86.167.168.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.livieloosblog.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAdc3LUAAABE"]
[Wed Jun 21 10:23:58 2017] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
[Wed Jun 21 10:23:58 2017] [warn] RewriteCond: NoCase option for non-regex pattern '-f' is not supported and will be ignored.
[Wed Jun 21 10:23:58 2017] [error] [client 5.28.163.95] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 95.163.28.5.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.womensfitnesschino.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAfk3x4AAACE"]
[Wed Jun 21 10:23:58 2017] [error] [client 5.28.163.95] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.womensfitnesschino.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAfk3x4AAACE"]
[Wed Jun 21 10:23:58 2017] [error] [client 168.167.86.83] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 83.86.167.168.rbldns.shared.unifiedlayer.com succeeded at REMOTE_ADDR. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "706"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: rbldns.shared.unifiedlayer.com"] [hostname "www.livieloosblog.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAfk3ycAAACT"]
[Wed Jun 21 10:23:58 2017] [error] [client 168.167.86.83] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "406"] [hostname "www.livieloosblog.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAfk3ycAAACT"]
[Wed Jun 21 10:23:59 2017] [error] [client 85.93.58.35] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "www.journeywithkarin.com"] [uri "/wp-login.php"] [unique_id "WUqdnkKT9M4AAAfk3xUAAACM"]
[Wed Jun 21 10:23:59 2017] [error] [client 70.234.0.211] Response header name '[Wed Jun 21 10' contains invalid characters, aborting request, referer: http://pacoweb.net/cgi-bin/Admin/CDprivateMenu.pl
[Wed Jun 21 10:23:59 2017] [error] [client 70.234.0.211] SoftException in Application.cpp:256: File "/home4/pacowebn/public_html/500.php" is writeable by group, referer: http://pacoweb.net/cgi-bin/Admin/CDprivateMenu.pl
[Wed Jun 21 10:23:59 2017] [error] [client 70.234.0.211] Premature end of script headers: 500.php, referer: http://pacoweb.net/cgi-bin/Admin/CDprivateMenu.pl
[Wed Jun 21 10:23:59 2017] [error] [client 70.234.0.211] (-3)Unknown error 18446744073709551613: Failed to flush CGI output to client, referer: http://pacoweb.net/cgi-bin/Admin/CDprivateMenu.pl
[Wed Jun 21 10:23:59 2017] [error] [client 117.253.235.120] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/eig_rules.conf"] [line "101"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "www.operationransom.com"] [uri "/wp-login.php"] [unique_id "WUqdn0KT9M4AAAfk31MAAACW"]

The following is a php log. I never use php. There are more errors than shown.

/home4/pacowebn/public_html/Libro/error_log:
[21-Jun-2017 09:31:18] PHP Warning:  PHP Startup: magickwand: Unable to initialize module
Module compiled with module API=20131226, debug=0, thread-safety=0
PHP    compiled with module API=20060613, debug=0, thread-safety=0
These options need to match
 in Unknown on line 0
[21-Jun-2017 09:31:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/php/56/usr/lib64/php/modules/mailparse.so' - /usr/php/56/usr/lib64/php/modules/mailparse.so: undefined symbol: zend_new_interned_string in Unknown on line 0
[21-Jun-2017 09:31:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/php/56/usr/lib64/php/modules/oauth.so' - /usr/php/56/usr/lib64/php/modules/oauth.so: undefined symbol: zend_new_interned_string in Unknown on line 0
[21-Jun-2017 09:31:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/php/56/usr/lib64/php/modules/oci8.so' - /usr/php/56/usr/lib64/php/modules/oci8.so: undefined symbol: zend_new_interned_string in Unknown on line 0
[21-Jun-2017 09:31:18] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/php/56/usr/lib64/php/modules/uploadprogress.so' - /usr/php/56/usr/lib64/php/modules/uploadprogress.so: undefined symbol: zend_ini_string_ex in Unknown on line 0
[21-Jun-2017 10:24:13] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/php/56/usr/lib64/php/modules/imagick.so' - /usr/php/56/usr/lib64/php/modules/imagick.so: undefined symbol: zend_new_interned_string in Unknown on line 0
[21-Jun-2017 10:24:13] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/php/56/usr/lib64/php/modules/pdo_mysql.so' - /usr/php/56/usr/lib64/php/modules/pdo_mysql.so: undefined symbol: mysqlnd_allocator in Unknown on line 0
[21-Jun-2017 10:24:13] PHP Warning:  PHP Startup: pdo_sqlite: Unable to initialize module
Module compiled with module API=20131226, debug=0, thread-safety=0
PHP    compiled with module API=20060613, debug=0, thread-safety=0
These options need to match
 in Unknown on line 0