Thousands of log File alerts every day

[MJ_C]

We use prestashop 1.7.6.7.

This APPEARED to have started when I adjusted the log file severity alert from 3 to 1 and immediately changed back to 3, but it could be coincidence.

Over the past week or so I have received thousands of emails from my prestashop store alerting me to "Log: You have a new alert from your shop"

The actual logs do not show anything strange and certainly not in this quantity.

The PS emails from the Back Office, don't show any of these emails being sent.

I checked in the actual database for the severity setting and it matches what I put in the back office gui and both adjust when changed and checked.

I was trying to find where these emails were being generated from IE the php file but cannot see where that is generated.

The emails appear to be the log_alert template in English, so I went looking for the actual txt and html files.  I renamed as many as I could find xxxxxxx.OLD

I assumed this would solve me getting thousands of emails but not the actual cause.

As of now I am STILL receiving those emails.

I have cleared the cache many times.

I use the panda theme, so I changed ALL themes MAIL > EN > error_log (or whatever the filename is to xxxxx.old, but still they keep coming.

Has anyone ANY ideas as to how to fix this ?

Best regards

Simon

 

Edited March 18 by MJ_C
adding information (see edit history)

[Knowband Plugins]

Change this setting in the admin -> Advanced Parameters -> Logs (Scroll down to bottom of the page)

 

Change it to major issue only (suggested) OR you can set it to None as well. 

 

 

[MJ_C]

Many thanks but I have tried that a number of times and double checked it is reflected in the DB.

A few hours ago, I noticed the email is the HTML one, so I added a note at the bottom to try and identify where it's originating but NONE of the emails show these additional notes.

The email show firstname lastname as template and I just have no idea where they are originating from.

 

[MJ_C]

Not sure why I didn't see this earlier.

classes/PrestaShopLogger.php

I changed the code to add logging BUT upon the next email received, I checked the logs and nothing.

Then I started to think SPAM!

Is there a way that it's possible to trigger the logger but without it registering on prestashop.

I really am at a loss!

[Knowband Plugins]

It looks like the server may have been compromised, with signs of unauthorized activity and malicious code execution. A comprehensive code scan is essential to detect and eliminate any harmful scripts or backdoors. Its recommended to perform a scan to identity such malicious code execution.