PLESK 12.5: AH01071: Got error 'Primary script unknown\n'

[ehrenwert]

Hello,

since a few days I'm getting more and more errors like this in my php error logs:

[Tue Nov 24 16:07:04.025470 2015] [proxy_fcgi:error] [pid 20003:tid 139677277275904] [client 95.90.226.xx:58930] AH01071: Got error 'Primary script unknown\n', referer: https://www.example.com/mypage/test
[Tue Nov 24 16:07:50.545155 2015] [proxy_fcgi:error] [pid 20003:tid 139677436737280] [client 212.202.164.xxx:59880] AH01071: Got error 'Primary script unknown\n', referer: https://www.example.com/mypage/test
[Tue Nov 24 16:07:50.731797 2015] [proxy_fcgi:error] [pid 20003:tid 139677285668608] [client 212.202.164.xxx:59886] AH01071: Got error 'Primary script unknown\n', referer: https://www.example.com/mypage/test
[Tue Nov 24 17:17:32.102749 2015] [proxy_fcgi:error] [pid 20003:tid 139677436737280] [client 77.23.246.xxx:54530] AH01071: Got error 'Primary script unknown\n', referer: https://www.example.com/mypage/test
[Tue Nov 24 17:36:35.584039 2015] [proxy_fcgi:error] [pid 20003:tid 139677260490496] [client 95.115.140.xx:44838] AH01071: Got error 'Primary script unknown\n', referer: https://www.example.com/mypage/test

Is this related to plesk fpm? Any ideas how to solve this?

 

[IgorG]

This looks like already submitted bugreport PPP-16560
Developers are working on it. As possible workaround you can try to use fastcgi PHP handler instead of php-fpm

 

[omexlu]

Hi,

Yes i got the same on my error logs. Need to be fixed, thx.

 

[Janko1000]

same here

 

[sebgonzes]

Hope solution will also solve other problem http://talk.plesk.com/threads/probl...eout-specified-has-expired-ah01075-er.335211/

 

[Damo]

This looks like already submitted bugreport PPP-16560
Developers are working on it. As possible workaround you can try to use fastcgi PHP handler instead of php-fpm

Is there an ETA for a fix for this? Curious.

 

[1awww.com]

Hackers use wrong URLs often AND Fail2Ban Filter dont filter this hackings!
So we have test with many different filters and with fail2ban-regex we get good matched results but with running the filter they ignore the regex - without notice / without info!
So we need urgend a function fail2ban-filter or a resulution why this message in error_log equal not in the modsec audit logs!