My Virtualmin and options under it have disappeared

But my Webmin is okay. I can not get to my main website, https://thenet4you.net
Someone must hate me… laughing…

ops, now tonight I can not get to the server at all…
IP = 208.104.147.195
I can ping it okay… and no error is showing on console

SYSTEM INFORMATION
OS type and version REQUIRED
Webmin version REQUIRED
Virtualmin version REQUIRED
Related packages SUGGESTED

Hi, System details might be useful.

I got this while trying to see if Webmin worked.

Secure Connection Failed

An error occurred during a connection to thenet4you.net:10000. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

conversely navigation to 208.104.147.195:10000 works fine, maybe a dns issue

That works because it uses http:// rather than https://, backs up that it’s a security certificate issue.

http://ip:10000 normal behavior should redirect to https://ip:10000 so something is wrong with the system.

Please post.

1 Like
System hostname mark… Operating system Ubuntu Linux 22.04.2
Webmin version 2.021 Usermin version 1.861
Virtualmin version 7.7-3 Pro Authentic theme version 20.21
Time on system Saturday, June 17, 2023 11:56 AM Kernel and CPU Linux 5.15.0-75-generic on x86_64
Processor information Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 16 cores CPU temperatures Core 1: 30°CCore 2: 26°CCore 10: 27°CCore 11: 27°CCore 1: 30°CCore 2: 25°CCore 10: 27°CCore 11: 33°C
System uptime 1 day, 2 hours, 09 minutes Running processes 261
CPU load averages 0.20 (1 min) 0.05 (5 mins) 0.02 (15 mins) Real memory 2.37 GiB used / 1.51 GiB cached / 15.62 GiB total
Virtual memory 0 bytes used / 3.99 GiB total Local disk space 20.19 GiB used / 79.57 GiB free / 99.77 GiB total
Package updates All installed packages are up to date

Stats History

Finally I got into https://thenet4you.net:10000

and this is a screen shot of what my issue is…
How do I recover my production system installed with WHMCS…
I paid them to setup the WHMCS system… Have not had a chance to even back that up again… I am scared I am going to have to re-install the WHOLE server again… and don’t want to do that… This happened after the Ubuntu OS update/upgrade event the other night.

hello all guys … HAPPY FATHERS DAY to all of you and myself. :cowboy_hat_face:

Please help with any ideals … My production system is DOWN… none of my websites come up now… not that they were correct displayed… I just want a working system. Have I been hacked? I have been using Virtualmin for a couple years now… and this has NEVER happened before. I mean with the disappearance of all the Virtualmin menu items.

I don’t see a problem with that screen capture unless you have more than 2 domains configured?

Check that the webserver (Apache/Nginx) is actually running. That “Server Status” tab.

look at my picture. where did ALL the menu options for Virtualmin GO ???
There is no DNS options or Domain options or website options, etc … on and on…
There is ONLY 2 OPTIONS showing in Virtualmin …

Where did they go? How to recover them?

and thank you for responding!!!

No idea - have not seen anything like that except when logging in as a client instead of root/ssh
What I was commenting on above was that I have seen and so have others where the webserver goes down inexplicably (Nginx in my case) but when you check that tab you can restart it with no evident errors. I was just asking to check as it could be linked.

OK, a few things:

  1. Your websites are being served by your web server (either Apache or nginx). Webmin/Virtualmin are not serving your websites, they merely configure your web server. Webmin can be stopped and websites will still work. So, either this is an issue with the system itself, hardware problem probably but maybe a kernel/driver bug, or the two problems are unrelated. Webmin problems cannot break your websites, and web server problems cannot break Webmin.
  2. We need to see some logs! We always need to see logs! Otherwise we’re guessing, just like you are.

Pick one problem (websites or Webmin) and look at the relevant log for that service.

Webmin logs are in /var/webmin. There is a miniserv.error log, which may or may not show something interesting. If it’s a hardware or system problem, you may not see good errors here.

Web server logs are in a couple of places. Domain logs are in /var/log/virtualmin. There will be an error_log for each domain. There will also likely be some extra startup logs either in the journal (maybe journalctl -fu apache2 or whatever the web server unit is called…you should try restarting the service while watching that log to see if there are any clues during shutdown and startup about why things are going weird).

If it’s a kernel or hardware problem, it will probably show up in some way in the kernel log (the dmesg command will show you the kernel log, but it may also be in the journal or in syslog or kern.log, depending on system configuration).

nano thenet4you.net_error_log.1

/var/log/virtualmin/thenet4you.net_error_log.1

[Sun Jun 11 00:24:58.370353 2023] [ssl:error] [pid 767526:tid 140052147455552] [client 167.248.133.185:54252] AH02032: Hostname deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatible SSL setup
[Sun Jun 11 01:37:52.960317 2023] [cgi:error] [pid 767527:tid 140052147455552] [client 128.14.134.170:36110] AH02811: script not found or unable to stat: /home/crazyhorse/cgi-bin/config.exp
[Sun Jun 11 04:27:56.628721 2023] [core:error] [pid 767527:tid 140051132429888] [client 83.97.73.89:40352] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Sun Jun 11 09:20:49.451072 2023] [authz_core:error] [pid 853884:tid 140052164240960] [client 83.97.73.89:59394] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Sun Jun 11 10:08:27.029285 2023] [authz_core:error] [pid 853885:tid 140052130670144] [client 83.97.73.89:40756] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Sun Jun 11 11:06:14.477204 2023] [authz_core:error] [pid 853885:tid 140050629129792] [client 85.217.144.133:51901] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Sun Jun 11 18:37:31.224300 2023] [core:error] [pid 853885:tid 140050612344384] [client 83.97.73.89:36860] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Mon Jun 12 03:59:40.029161 2023] [authz_core:error] [pid 914580:tid 140051761587776] [client 83.97.73.89:43146] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Mon Jun 12 04:13:44.670585 2023] [authz_core:error] [pid 914579:tid 140051728016960] [client 83.97.73.89:33976] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Mon Jun 12 09:13:40.994224 2023] [ssl:error] [pid 914579:tid 140052147455552] [client 3.81.171.107:54734] AH02042: rejecting client initiated renegotiation
[Mon Jun 12 10:25:38.749460 2023] [core:error] [pid 914579:tid 140051132429888] [client 83.97.73.89:46702] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Mon Jun 12 10:36:53.357825 2023] [ssl:error] [pid 914580:tid 140051719624256] [client 167.248.133.191:51046] AH02032: Hostname mail.deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatible SSL >
[Mon Jun 12 12:25:17.085930 2023] [ssl:error] [pid 914580:tid 140051761587776] [client 167.248.133.38:40108] AH02032: Hostname www.nightmare-net.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatible SSL >
[Mon Jun 12 13:46:29.827949 2023] [authz_core:error] [pid 914580:tid 140051769980480] [client 43.156.164.127:64377] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Mon Jun 12 15:50:34.186183 2023] [ssl:error] [pid 914579:tid 140051149215296] [client 167.94.138.126:37978] AH02032: Hostname webmail.deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatible SS>
[Mon Jun 12 16:01:24.039236 2023] [ssl:error] [pid 914579:tid 140050603951680] [client 167.248.133.38:40642] AH02032: Hostname www.deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatible SSL se>
[Mon Jun 12 16:20:52.545924 2023] [authz_core:error] [pid 914579:tid 140052122277440] [client 83.97.73.89:48622] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Tue Jun 13 01:02:09.214187 2023] [core:error] [pid 1061568:tid 140051115644480] [client 83.97.73.89:37238] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Tue Jun 13 06:43:42.577771 2023] [core:error] [pid 1061568:tid 140050612344384] [client 193.32.162.190:42730] AH10244: invalid URI path (/…/…/mnt/mtd/Config/Account1)
[Tue Jun 13 07:36:35.621897 2023] [core:error] [pid 1061569:tid 140051719624256] [client 193.32.162.190:60262] AH10244: invalid URI path (/…/…/mnt/mtd/Config/Account2)
[Tue Jun 13 10:30:03.328051 2023] [authz_core:error] [pid 1061568:tid 140050612344384] [client 83.97.73.89:52110] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Tue Jun 13 11:12:01.313694 2023] [authz_core:error] [pid 1061569:tid 140051744802368] [client 83.97.73.89:50702] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Tue Jun 13 17:24:50.471681 2023] [core:error] [pid 1061568:tid 140050620737088] [client 83.97.73.89:51996] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Tue Jun 13 18:48:33.241823 2023] [authz_core:error] [pid 1061568:tid 140051157608000] [client 208.104.147.195:44968] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/composer/LICENSE
[Tue Jun 13 20:36:32.249955 2023] [authz_core:error] [pid 1207982:tid 140052130670144] [client 208.104.147.195:52704] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/composer/LICENSE
[Tue Jun 13 22:41:37.695487 2023] [authz_core:error] [pid 1210209:tid 140051224716864] [client 83.97.73.89:41224] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Wed Jun 14 00:18:01.980411 2023] [authz_core:error] [pid 1224691:tid 140052147455552] [client 83.97.73.89:49490] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Wed Jun 14 04:08:49.276784 2023] [core:error] [pid 1224691:tid 140050603951680] [client 185.180.143.140:33838] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png)
[Wed Jun 14 04:08:49.593181 2023] [core:error] [pid 1224692:tid 140051769980480] [client 185.180.143.140:33840] AH10244: invalid URI path (/icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png)
[Wed Jun 14 04:08:49.920228 2023] [core:error] [pid 1224692:tid 140051736409664] [client 185.180.143.140:33842] AH10244: invalid URI path (/icons/.%2e/%2e%2e/apache2/icons/sphere1.png)
[Wed Jun 14 04:21:48.208046 2023] [authz_core:error] [pid 1224691:tid 140051811911232] [client 83.97.73.89:43870] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Wed Jun 14 09:24:25.774960 2023] [core:error] [pid 1224692:tid 140051115644480] [client 83.97.73.89:47558] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Wed Jun 14 20:42:38.288031 2023] [authz_core:error] [pid 1224692:tid 140051769980480] [client 83.97.73.89:54050] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Wed Jun 14 21:20:18.610703 2023] [authz_core:error] [pid 1224692:tid 140052139062848] [client 83.97.73.89:33280] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Wed Jun 14 21:24:49.843225 2023] [ssl:error] [pid 1224691:tid 140051124037184] [client 167.94.138.33:47714] AH02032: Hostname deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatible SSL setup
[Wed Jun 14 21:59:44.490631 2023] [core:error] [pid 1224692:tid 140051115644480] [client 185.65.135.140:55560] AH10244: invalid URI path (/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh)
[Wed Jun 14 21:59:46.357786 2023] [core:error] [pid 1224691:tid 140052130670144] [client 185.65.135.140:56456] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65>
[Wed Jun 14 21:59:46.832352 2023] [core:error] [pid 1224691:tid 140052122277440] [client 185.65.135.140:60980] AH10244: invalid URI path (/assets/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh)
[Wed Jun 14 21:59:47.319836 2023] [core:error] [pid 1224692:tid 140052130670144] [client 185.65.135.140:33780] AH10244: invalid URI path (/assets/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/>
[Wed Jun 14 21:59:50.323256 2023] [core:error] [pid 1224691:tid 140051166000704] [client 185.65.135.140:34958] AH10244: invalid URI path (/js/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh)
[Wed Jun 14 21:59:57.927955 2023] [core:error] [pid 1224692:tid 140052147455552] [client 185.65.135.140:42798] AH10244: invalid URI path (/js/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32>
[Wed Jun 14 21:59:58.306146 2023] [core:error] [pid 1224691:tid 140051157608000] [client 185.65.135.140:33310] AH10244: invalid URI path (/css/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh)
[Wed Jun 14 21:59:58.708449 2023] [core:error] [pid 1224691:tid 140051115644480] [client 185.65.135.140:34276] AH10244: invalid URI path (/css/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%3>
[Wed Jun 14 22:51:47.026978 2023] [authz_core:error] [pid 1224692:tid 140052147455552] [client 208.104.147.195:34658] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/composer/LICENSE
[Thu Jun 15 00:14:09.497932 2023] [ssl:error] [pid 1386525:tid 140050612344384] [client 167.94.138.34:42762] AH02032: Hostname autodiscover.deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatib>
[Thu Jun 15 02:58:27.161406 2023] [core:error] [pid 1386525:tid 140052147455552] [client 83.97.73.89:54448] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh)
[Thu Jun 15 08:04:06.958108 2023] [authz_core:error] [pid 1386525:tid 140052122277440] [client 83.97.73.89:44576] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/phpunit
[Thu Jun 15 12:20:40.105307 2023] [ssl:error] [pid 1487215:tid 140050696238656] [client 162.142.125.225:49794] AH02032: Hostname autoconfig.deepinwoods.com provided via SNI and hostname 208.104.147.195 provided via HTTP have no compatib>
[Thu Jun 15 16:23:16.081447 2023] [authz_core:error] [pid 1487288:tid 140050629129792] [client 208.104.147.195:57462] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/composer/LICENSE
**

[Thu Jun 15 17:43:41.941001 2023] [authz_core:error] [pid 1487288:tid 140051744802368] [client 208.104.147.195:57380] AH01630: client denied by server configuration: /home/crazyhorse/public_html/vendor/composer/LICENSE

**

Maybe this is my issue?? Is it? What is the error and fix here for just this one major thingy?

When I do the command : curl -Is http://thenet4you.net | head -n 1

curl: error while loading shared libraries: libssl.so.3: cannot open shared object file: No such file or directory

Is this config file paths okay?

Here is my apache2 error log file

[Thu Jun 15 00:00:08.959798 2023] [ssl:warn] [pid 1853:tid 140052471740288] AH01906: reseller.enom.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jun 15 00:00:08.959837 2023] [ssl:warn] [pid 1853:tid 140052471740288] AH01909: reseller.enom.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jun 15 00:00:08.981488 2023] [mpm_event:notice] [pid 1853:tid 140052471740288] AH00489: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2 configured – resuming normal operations
[Thu Jun 15 00:00:08.981504 2023] [core:notice] [pid 1853:tid 140052471740288] AH00094: Command line: ‘/usr/sbin/apache2’
[Thu Jun 15 17:56:42.107206 2023] [mpm_event:notice] [pid 1853:tid 140052471740288] AH00491: caught SIGTERM, shutting down

That is my correct registrar

oh, by the way, I am not getting a clean server update ing …
apt -y update = the picture included here…

oh crap… forgot, today is a national holiday… happy slavery desolved ended day, I think it is called…

I Pass …

My server is more important, and I am still sick on and off… so doing best I can here everyone. forgive me.

nano /var/log/syslog
The picture is what I get… ssl error… no file and no directory on server …