access file filled with 400 226

Server access shows infinite amount of log entries like this

198.74.52.128 - - [23/Oct/2020:21:59:45 -0400] "POST / HTTP/1.1" 400 226

198.74.52.128 is the server ip address.

There is an entry every minute for months and months.

You must check your configs, scripts and logs about the bad reques. Nobody able to know what and why happening at your server
Check what exactly happend at the time when you see the error.

OK Igor, Look here for the reason.  These repeating error lines happen at that same time as the access lines.

Code: [Select]


[Fri Jan 08 03:15:21.972657 2021] [mpm_event:notice] [pid 88557:tid 139773389120064] AH00492: caught SIGWINCH, shutting down gracefully
[Fri Jan 08 03:15:23.123055 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: cpanel.treecousins.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.125589 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: webmail.treecousins.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.129816 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: cpanel.pawpoopers.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.130882 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: webmail.pawpoopers.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.132635 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: cpanel.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.133612 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: webmail.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.135645 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: cpanel.fhservicelist.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.136636 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: webmail.fhservicelist.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.138632 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: cpanel.craven4sale.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.139686 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: webmail.craven4sale.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.140730 2021] [ssl:warn] [pid 105661:tid 139841798087232] AH01909: server.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.141039 2021] [:notice] [pid 105661:tid 139841798087232] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Fri Jan 08 03:15:23.141047 2021] [:notice] [pid 105661:tid 139841798087232] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2"
[Fri Jan 08 03:15:23.141052 2021] [:notice] [pid 105661:tid 139841798087232] ModSecurity: PCRE compiled version="8.42 "; loaded version="8.42 2018-03-20"
[Fri Jan 08 03:15:23.141056 2021] [:notice] [pid 105661:tid 139841798087232] ModSecurity: LIBXML compiled version="2.9.7"
[Fri Jan 08 03:15:23.141059 2021] [:notice] [pid 105661:tid 139841798087232] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Fri Jan 08 03:15:23.208551 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Fri Jan 08 03:15:23.209109 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.treecousins.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.210076 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.treecousins.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.211083 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.pawpoopers.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.212065 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.pawpoopers.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.213084 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.214060 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.215144 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.fhservicelist.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.216182 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.fhservicelist.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.217231 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.craven4sale.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.218163 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.craven4sale.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.219199 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: server.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.222821 2021] [mpm_event:notice] [pid 105662:tid 139841798087232] AH00489: Apache/2.4.39 (Unix) OpenSSL/1.0.2o-fips configured -- resuming normal operations
[Fri Jan 08 03:15:23.222873 2021] [core:notice] [pid 105662:tid 139841798087232] AH00094: Command line: '/usr/local/apache/bin/httpd'
[Fri Jan 08 03:15:23.710148 2021] [mpm_event:notice] [pid 105662:tid 139841798087232] AH00493: SIGUSR1 received. Doing graceful restart
[Fri Jan 08 03:15:23.790649 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Fri Jan 08 03:15:23.791228 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.treecousins.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.792144 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.treecousins.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.793183 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.pawpoopers.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.794189 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.pawpoopers.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.795212 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.796137 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.797175 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.fhservicelist.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.798359 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.fhservicelist.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.799509 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: cpanel.craven4sale.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.800637 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: webmail.craven4sale.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.801887 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01909: server.fhservicelist.org:443:0 server certificate does NOT include an ID which matches the server name
[Fri Jan 08 03:15:23.802774 2021] [mpm_event:notice] [pid 105662:tid 139841798087232] AH00489: Apache/2.4.39 (Unix) OpenSSL/1.0.2o-fips configured -- resuming normal operations
[Fri Jan 08 03:15:23.802791 2021] [core:notice] [pid 105662:tid 139841798087232] AH00094: Command line: '/usr/local/apache/bin/httpd'
[Fri Jan 08 03:15:24.710668 2021] [mpm_event:notice] [pid 105662:tid 139841798087232] AH00493: SIGUSR1 received. Doing graceful restart
[Fri Jan 08 03:15:24.781540 2021] [ssl:warn] [pid 105662:tid 139841798087232] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Fri Jan 08 03:15:24.782040 2021] [ssl:warn] [pid 105662:tid

You do not have SSL installed for subdomains. This is not a problem, just ignore it

But this is happening at the same time I am getting access errors sometimes 4x/minute

What are those errors happening 3-4x/minute?

It also says its doing a graceful restart every minute.  I sure hope its not the server that is shutting down every minute