programmertehamatech

Active Member
Sep 23, 2023
34
0
6
https://tehamatechnology.com/
cPanel Access Level
DataCenter Provider
I would say it's time to make a ticket on this so we can take a look directly.



Good evening
I have a problem with WordPress
It is Bad Request
Your browser sent a request that this server could not understand.
Additionally, a 400 Bad Request error was encountered while trying to use an ErrorDocument to handle the request.

Occurs when downloading a plugin or template
Note that I own a VPS server and I do not know where the error came from
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
Hey there! The first area to check for these types of issues is the server's Apache log at /etc/apache2/logs/error_log. If you watch that file while reproducing the error in the browser, I would expect more information to appear in the log.
 

programmertehamatech

Active Member
Sep 23, 2023
34
0
6
https://tehamatechnology.com/
cPanel Access Level
DataCenter Provider
Hey there! The first area to check for these types of issues is the server's Apache log at /etc/apache2/logs/error_log. If you watch that file while reproducing the error in the browser, I would expect more information to appear in the log.

[Thu Sep 28 08:13:05.259042 2023] [core:warn] [pid 467418] (101)Network is unreachable: AH00056: connect to listene>
The most frequent error in the file
 

programmertehamatech

Active Member
Sep 23, 2023
34
0
6
https://tehamatechnology.com/
cPanel Access Level
DataCenter Provider
Hey there! The first area to check for these types of issues is the server's Apache log at /etc/apache2/logs/error_log. If you watch that file while reproducing the error in the browser, I would expect more information to appear in the log.

There are a lot of records

[Thu Sep 28 10:01:43.791727 2023] [authz_core:error] [pid 502211] [client 40.77.167.136:0] AH01630: client denied b>
[Thu Sep 28 10:22:24.114249 2023] [security2:error] [pid 506196] [client 31.31.183.7:0] [client 31.31.183.7] ModSec>
[Thu Sep 28 10:22:24.114851 2023] [security2:error] [pid 506196] [client 31.31.183.7:0] [client 31.31.183.7] ModSec>
[Thu Sep 28 10:22:24.114876 2023] [proxy:error] [pid 506196] (20014)Internal error (specific information not available>
[Thu Sep 28 10:22:24.115200 2023] [security2:error] [pid 506196] [client 31.31.183.7:0] [client 31.31.183.7] ModSec>
[Thu Sep 28 10:22:24.115249 2023] [proxy_fcgi:error] [pid 506196] (20014)Internal error (specific information not a>
[Thu Sep 28 10:22:24.121905 2023] [security2:error] [pid 506196] [client 31.31.183.7:0] [client 31.31.183.7] ModSec>
[Thu Sep 28 10:22:24.122208 2023] [security2:error] [pid 506196] [client 31.31.183.7:0] [client 31.31.183.7] ModSec>

I did not understand exactly where my mistake was
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
I would recommend running this command:

Code:
tail -f /etc/apache2/logs/error_log
and then reproducing the issue in a browser. That will let the log scroll in real-time while the issue happens. I would focus on the mod_security entries in the log as those would be most likely to be related to the issue.
 

programmertehamatech

Active Member
Sep 23, 2023
34
0
6
https://tehamatechnology.com/
cPanel Access Level
DataCenter Provider
I would recommend running this command:

Code:
tail -f /etc/apache2/logs/error_log
and then reproducing the issue in a browser. That will let the log scroll in real-time while the issue happens. I would focus on the mod_security entries in the log as those would be most likely to be related to the issue.
This is the error that appears

[Sun Oct 01 09:52:29.488234 2023] [security2:error] [pid 797797] [client 89.189.65.39:0] [client 89.189.65.39] ModSecurity: Multipart parsing error: Multipart: Failed to create file: /var/imunify360/tmp_modsec/20231001-095229-ZRkXLZ45T0QLYozdp5aRxQAAAAc-file-fT62IS [hostname "host.name.com"] [uri "/wp-admin/update.php"] [unique_id "ZRkXLZ45T0QLYozdp5aRxQAAAAc"], referer: Log In ‹ kia — WordPress
[Sun Oct 01 09:52:29.489007 2023] [security2:error] [pid 797797] [client 89.189.65.39:0] [client 89.189.65.39] ModSecurity: Failed to open temporary file for reading: /var/imunify360/tmp_modsec/20231001-095229-ZRkXLZ45T0QLYozdp5aRxQAAAAc-request_body-7zpInQ [hostname "host.name.com"] [uri "/wp-admin/update.php"] [unique_id "ZRkXLZ45T0QLYozdp5aRxQAAAAc"], referer: Log In ‹ kia — WordPress
[Sun Oct 01 09:52:29.489035 2023] [proxy:error] [pid 797797] (20014)Internal error (specific information not available): [client 89.189.65.39:0] AH01095: prefetch request body failed to 0.0.0.0:0 (httpd-UDS) from 194.163.150.133 (), referer: Log In ‹ kia — WordPress
[Sun Oct 01 09:52:29.489624 2023] [security2:error] [pid 797797] [client 89.189.65.39:0] [client 89.189.65.39] ModSecurity: Input filter: Error reading from temporary file: Bad file descriptor [hostname "host.name.com"] [uri "/index.php"] [unique_id "ZRkXLZ45T0QLYozdp5aRxQAAAAc"], referer: Log In ‹ kia — WordPress
[Sun Oct 01 09:52:29.489662 2023] [proxy_fcgi:error] [pid 797797] (20014)Internal error (specific information not available): [client 89.189.65.39:0] AH01075: Error dispatching request to : (reading input brigade), referer: Log In ‹ kia — WordPress
[Sun Oct 01 09:52:29.492661 2023] [security2:error] [pid 797797] [client 89.189.65.39:0] [client 89.189.65.39] ModSecurity: Audit log: Failed to open temporary file for reading: /var/imunify360/tmp_modsec/20231001-095229-ZRkXLZ45T0QLYozdp5aRxQAAAAc-request_body-7zpInQ [hostname "host.name.com"] [uri "/wp-admin/update.php"] [unique_id "ZRkXLZ45T0QLYozdp5aRxQAAAAc"], referer: Log In ‹ kia — WordPress
[Sun Oct 01 09:52:29.493171 2023] [security2:error] [pid 797797] [client 89.189.65.39:0] [client 89.189.65.39] ModSecurity: Input filter: Failed to delete temporary file: /var/imunify360/tmp_modsec/20231001-095229-ZRkXLZ45T0QLYozdp5aRxQAAAAc-request_body-7zpInQ [hostname "host.name.com"] [uri "/wp-admin/update.php"] [unique_id "ZRkXLZ45T0QLYozdp5aRxQAAAAc"], referer: Log In ‹ kia — WordPress
 
Last edited by a moderator:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
Thanks for that information. When this happens, that usually means that you need to add write permissions to the /var/imunify360/tmp_modsec/ directory. Can you adjust the permissions on that directory and see if that resolves the issue?
 

programmertehamatech

Active Member
Sep 23, 2023
34
0
6
https://tehamatechnology.com/
cPanel Access Level
DataCenter Provider
ModSecurityThe problem has been solved and you have stopped



Thanks for that information. When this happens, that usually means that you need to add write permissions to the /var/imunify360/tmp_modsec/ directory. Can you adjust the permissions on that directory and see if that resolves the issue?
 

Attachments