# trans

rpmdb_version_begin: 741:1c47d6bdf5fc7e1ebfc02bd678ccf964c5ab01ed
rpmdb_version_end: 763:1d1f3a13383dd3cb4897d1477ef9119ed2f7758c
releasever: 8
cmdline:
install --disableexcludes=all --skip-broken -y imh-wp-cli imh-nrpe-ded dedrads fixperms sudoers-ded tier1adv-cli-dedicated imhsc-scops imh-statrep-ded


rpmdb_version_begin: 880:dfab7052313c59b8055de1345eed0e039266f152
rpmdb_version_end: 904:33eeb9de6d111210b10c60a0d2e81d5571a9d598
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install at bind boost-program-options glibc-locale-source libicu libzip mailx pam-devel patch python2 python2-docs python2-setuptools python2-tools python3-docs rsync sqlite util-linux-user --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1576:189c026ebdc5bd6a0235cf4193594f9bf3502917
rpmdb_version_end: 1579:a17e3ab9ec64f575c8de992ebb1ba532906385f9
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install dnf-plugin-universal-hooks ea-cpanel-tools ea-profiles-cpanel --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1597:d3556409878c2c3558ad2c62f21f98b95d691e7a
rpmdb_version_end: 1680:be4dda1f2ee5474ff36e33cf690d4f3e09b9b5df
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install ea-apache24 ea-apr ea-apr-util ea-apache24-mod_mpm_prefork ea-apache24-mod_ruid2 ea-apache24-mod_ssl ea-apache24-mod_deflate ea-apache24-mod_expires ea-apache24-mod_headers ea-apache24-mod_proxy ea-apache24-mod_proxy_fcgi ea-apache24-mod_cgi ea-apache24-mod_unique_id ea-apache24-mod_security2 ea-php81 ea-php81-php-bcmath ea-php81-php-calendar ea-php81-php-curl ea-php81-php-ftp ea-php81-php-gd ea-php81-php-iconv ea-php81-php-imap ea-php81-php-mbstring ea-php81-php-mysqlnd ea-php81-php-pdo ea-php81-php-posix ea-php81-php-sockets ea-php81-php-xml ea-php81-runtime ea-php81-php-fpm ea-php81-php-zip ea-php82 ea-php82-php-bcmath ea-php82-php-calendar ea-php82-php-curl ea-php82-php-ftp ea-php82-php-gd ea-php82-php-iconv ea-php82-php-imap ea-php82-php-mbstring ea-php82-php-mysqlnd ea-php82-php-pdo ea-php82-php-posix ea-php82-php-sockets ea-php82-php-xml ea-php82-runtime ea-php82-php-fpm ea-php82-php-zip --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1680:be4dda1f2ee5474ff36e33cf690d4f3e09b9b5df
rpmdb_version_end: 1685:7dab0a256fb4acc080f40b55a90a8ff9cf2e094d
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install MariaDB-server MariaDB-client MariaDB-devel MariaDB-shared MariaDB-common --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1765:72470c3168e9ba091cd696dd97e9caf7a5f8a654
rpmdb_version_end: 1766:f45f9f4c71cfdd151d23166f6f64072085745d51
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install cpanel-analytics --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1766:f45f9f4c71cfdd151d23166f6f64072085745d51
rpmdb_version_end: 1767:f5a1fab4a74844a726a92e2241ae6c58f91acfe7
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install cpanel-banners-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1767:f5a1fab4a74844a726a92e2241ae6c58f91acfe7
rpmdb_version_end: 1770:c400ebc27d2107826d850ffd066e20d8106f3b9a
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install cpanel-koality-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1770:c400ebc27d2107826d850ffd066e20d8106f3b9a
rpmdb_version_end: 1771:88ffee1a8a39dd4ec192e2f79d6788e8416e5a6a
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install cpanel-sitejet-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1771:88ffee1a8a39dd4ec192e2f79d6788e8416e5a6a
rpmdb_version_end: 1772:72793edaaa0111a7b9c8f803c8320f0aa551a812
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install cpanel-plugin-monitoring-campaigns --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1772:72793edaaa0111a7b9c8f803c8320f0aa551a812
rpmdb_version_end: 1778:065eb5ab5410b82970d0d3230084442e84698ad2
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf --setopt keepcache=1 install cpanel-monitoring-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 1779:9e9fa614b1d3606d995d5cea85f52533be89c428
rpmdb_version_end: 1830:b0283fd492d9dcfc3491a717bf2e0733bd6a9b3a
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install bind-devel boost-serialization dpkg e2fsprogs-devel ftp gd-devel gdbm-devel gettext-devel ghostscript giflib hunspell hunspell-en libX11-devel libXpm-devel libaio-devel libidn-devel libjpeg-turbo-devel libpng-devel libtiff-devel libtool libtool-ltdl-devel libwmf perl-Expect perl-IO-Tty perl-JSON-XS perl-YAML-Syck python2-devel traceroute --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2061:7b2dc70433fc7f046ad150d14f7b49916d006d0b
rpmdb_version_end: 2130:dbd9ed88f7be8aa0e766697474b82f92c41fa7e7
releasever: 8
cmdline:
-y --best --allowerasing install cpanel-hooks-ded cpanel-googleapps spamdconf-plugin imh-modsec maldet-imh imh-drush ea-apache24-mod_env ea-apache24-mod_headers ea-apache24-mod_version perl-Parse-CPAN-Packages perl-Net-IP imh-sys-snap imh-fpmstatus cpanel-skeleton imh-cpanel-dnsadmin imh-dnskeyapi imh-user-setup imh-backup-client


rpmdb_version_begin: 2134:79ae71e74df0b80b8b473fc442114a01d0d9e06d
rpmdb_version_end: 2134:4ec0c5e917927fc5a351b467d88b7bc602e6d174
releasever: 8
cmdline:
update --assumeyes imunify-antivirus ai-bolit alt-php-hyperscan imunify-common imunify-notifier imunify-core imunify-ui imunify360-venv minidaemon alt-php-internal app-version-detector


rpmdb_version_begin: 2140:8e78f5837e3f37378a0e92bbd1fcdf8a8a53856b
rpmdb_version_end: 2141:0dc507b9d6ff770cc4063cf2221c335a604c62a7
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install cpanel-socialbee-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2141:0dc507b9d6ff770cc4063cf2221c335a604c62a7
rpmdb_version_end: 2142:de8930cfb4886485c37f1fc5822df564d0d9ea60
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install cpanel-xovi-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2142:de8930cfb4886485c37f1fc5822df564d0d9ea60
rpmdb_version_end: 2142:d0f62d77dae05664d7af633fe8571cd17e5fa652
releasever: 8
cmdline:
update --assumeyes imunify-antivirus ai-bolit alt-php-hyperscan imunify-common imunify-notifier imunify-core imunify-realtime-av imunify-ui imunify360-venv minidaemon alt-php-internal app-version-detector


rpmdb_version_begin: 2142:72c12278a2d9896992fb90f572f82d65e0928b05
rpmdb_version_end: 2137:6e3b947e5248ed05bd2eb9b39a9eab770364036a
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf erase cpanel-monitoring-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2137:6e3b947e5248ed05bd2eb9b39a9eab770364036a
rpmdb_version_end: 2142:72c12278a2d9896992fb90f572f82d65e0928b05
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install cpanel-monitoring-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2142:2432625de3e5674fd0a3bdc20b07e21c1e438727
rpmdb_version_end: 2144:52fc0d89a5350363b488fea736dcca47adc317c5
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install python3-dns python3-html2text --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2234:5f7e05f8553ca8e873c9b2889e155b3175fd499e
rpmdb_version_end: 2234:3b6a481d0541cca80c0fed87d5935009c11b02a6
releasever: 8
cmdline:
update --assumeyes imunify-antivirus ai-bolit alt-php-hyperscan imunify-release imunify-common imunify-notifier imunify-core imunify-realtime-av imunify-ui imunify360-venv minidaemon alt-php-internal app-version-detector


rpmdb_version_begin: 2264:df61b513b1a3a9f7faf048a68ce23fd2ccc26e9d
rpmdb_version_end: 2264:6cacd8fc9fbc92b30b8d0ccbc9df571463156ede
releasever: 8
cmdline:
update --assumeyes imunify-antivirus ai-bolit alt-common-release alt-php-hyperscan imunify-release imunify-common imunify-notifier imunify-core imunify-realtime-av imunify-ui imunify360-venv minidaemon alt-php-internal app-version-detector


rpmdb_version_begin: 2263:0f711e49e236e9095eb7750958b69ede84637b7e
rpmdb_version_end: 2263:0f711e49e236e9095eb7750958b69ede84637b7e
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf reinstall net-snmp --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2264:34065f27fd33b051c5b535123743aed900e0e6f4
rpmdb_version_end: 2270:253e2b3d161e0cf53c221f98234c6c23bc8418f1
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install lua-socket python312 --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2281:7ef937d037126c2820f7fccd02caf10dfcb09718
rpmdb_version_end: 2282:34c5934021cd88256251f87b4bbe5dc9e5ebd276
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf install cpanel-comet-backup-plugin --enablerepo=powertools --enablerepo=epel


rpmdb_version_begin: 2285:fd6b8cbcdbc266369e1f996ca2fc0d44c0292a28
rpmdb_version_end: 2284:02a0c9d40746ed32c06eacfac412d8ceedad76c9
releasever: 8
cmdline:
--assumeyes --color=never --config /etc/yum.conf erase cpanel-site-publisher-templates --enablerepo=powertools --enablerepo=epel


# console_output

line:
libsemanage.semanage_direct_install_info: Overriding pcp module at lower priority 100 with module at priority 200.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/kcare.service -> /usr/lib/systemd/system/kcare.service.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/nrpe.service -> /etc/systemd/system/nrpe.service.


line:
Created symlink /etc/systemd/system/sockets.target.wants/imunify-notifier.socket → /usr/lib/systemd/system/imunify-notifier.socket.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/imunify-notifier.service → /usr/lib/systemd/system/imunify-notifier.service.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/aibolit-resident.service → /usr/lib/systemd/system/aibolit-resident.service.


line:
Created symlink /etc/systemd/system/sockets.target.wants/aibolit-resident.socket → /usr/lib/systemd/system/aibolit-resident.socket.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/imunify-antivirus.service → /usr/lib/systemd/system/imunify-antivirus.service.


line:
Created symlink /etc/systemd/system/sockets.target.wants/imunify-antivirus.socket → /usr/lib/systemd/system/imunify-antivirus.socket.


line:
Created symlink /etc/systemd/system/sockets.target.wants/imunify-antivirus-user.socket → /usr/lib/systemd/system/imunify-antivirus-user.socket.


line:
Created symlink /etc/systemd/system/sockets.target.wants/imunify-antivirus-sensor.socket → /usr/lib/systemd/system/imunify-antivirus-sensor.socket.


line:
mode of '/opt/alt/php-internal/usr/share/man/man1' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)


line:
mode of '/opt/alt/php-internal/usr/lib64/httpd/modules' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)


line:
mode of '/opt/alt/php-internal/usr/lib64/php/pear' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)


line:
mode of '/opt/alt/php-internal/usr/lib64/php/modules/hyperscan.so' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)


line:
copying module nav-root from /usr/local/cpanel/whostmgr/docroot/cgi/imunify/brought_by_package_manager to /usr/local/cpanel/whostmgr/docroot/cgi/imunify/assets/static


line:
copying module other-root from /usr/local/cpanel/whostmgr/docroot/cgi/imunify/brought_by_package_manager to /usr/local/cpanel/whostmgr/docroot/cgi/imunify/assets/static


line:
copying spa root from brought_by_package_manager/ to /usr/local/cpanel/whostmgr/docroot/cgi/imunify/assets/static/


line:
copying shared deps from brought_by_package_manager/shared-dependencies to /usr/local/cpanel/whostmgr/docroot/cgi/imunify/assets/static/shared-dependencies


line:
copying module nav-root from /usr/local/cpanel/whostmgr/docroot/cgi/imunify/brought_by_package_manager to /usr/local/cpanel/base/frontend/jupiter/imunify/assets/static


line:
copying module other-root from /usr/local/cpanel/whostmgr/docroot/cgi/imunify/brought_by_package_manager to /usr/local/cpanel/base/frontend/jupiter/imunify/assets/static


line:
copying spa root from brought_by_package_manager/ to /usr/local/cpanel/base/frontend/jupiter/imunify/assets/static/


line:
copying shared deps from brought_by_package_manager/shared-dependencies to /usr/local/cpanel/base/frontend/jupiter/imunify/assets/static/shared-dependencies


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 729212 (systemd+/proc check method).


line:
Warning: Undefined array key 1 in /usr/local/cpanel/3rdparty/wp-toolkit/plib/library/Service/Cpanel/Features/CpanelFeaturesManager.php on line 110


line:
Created symlink /etc/systemd/system/multi-user.target.wants/wp-toolkit-background-tasks.service → /usr/lib/systemd/system/wp-toolkit-background-tasks.service.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/wp-toolkit-scheduled-tasks.service → /usr/lib/systemd/system/wp-toolkit-scheduled-tasks.service.


line:
Waiting for “cpanel_php_fpm” to restart gracefully …waiting for “cpanel_php_fpm” to initialize ………finished.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 729643 (systemd+/proc check method).


line:
Please either set the correct hostname with --host, or override this check and register anyways with --allow-no-amp


line:
ln -sT /opt/backups/plugin_installers/dynamicui_files.conf /usr/local/cpanel/base/frontend/jupiter/dynamicui/dynamicui_files.conf


line:
cp -p /opt/backups/plugin_installers/plugin.imh/backup_mgr.png /usr/local/cpanel/whostmgr/docroot/addon_plugins/backup_mgr.png


line:
Created symlink /etc/systemd/system/multi-user.target.wants/backup-runner.service → /usr/lib/systemd/system/backup-runner.service.


line:
ln: failed to create symbolic link '/usr/local/apache/conf/modsec-imh/html/errors': No such file or directory


line:
	Jan 13 01:39:32 ded1903.inmotionhosting.com systemd[1]: Starting Apache web server managed by cPanel EasyApache...


line:
	Jan 13 01:39:32 ded1903.inmotionhosting.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory


line:
	Jan 13 01:39:32 ded1903.inmotionhosting.com systemd[1]: Started Apache web server managed by cPanel EasyApache.


line:
	[Mon Jan 13 01:39:32.514202 2025] [mpm_event:notice] [pid 727178:tid 727178] AH00489: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:39:32.495312 2025] [security2:notice] [pid 727176:tid 727176] ModSecurity for Apache/2.9.7 (http://www.modsecurity.org/) configured.


line:
	[Mon Jan 13 01:38:20.182214 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:38:19.982000 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:35:26.266983 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:34:22.031529 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:34:18.669753 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:33:57.649632 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:33:55.118910 2025] [mpm_prefork:notice] [pid 689155:tid 689155] AH00163: Apache/2.4.62 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations


line:
	[Mon Jan 13 01:33:55.096027 2025] [security2:notice] [pid 689150:tid 689150] ModSecurity for Apache/2.9.7 (http://www.modsecurity.org/) configured.


line:
	dnsadmin (dnsadmin - dormant mode) is running as root with PID 688817 (systemd+/proc check method).


line:
	Jan 13 01:33:47 ded1903.inmotionhosting.com restartsrv_dnsadmin[688817]: Starting PID 688817: dnsadmin-dormant


line:
The script, when executed with --describe printed data via STDERR: /opt/dedrads/updatednsadmin: line 11: exit: Missing dnsadmin script for this version: numeric argument required


line:
WARNING: No "describe" pattern found in script. It is HIGHLY recommended to pass the "--manual" when providing hook descriptors on the command line.


line:
Registering Remote Mx Wizard cPanel feature in jupiter theme .       Running ...... [1;32mComplete[0m


line:
Created symlink /etc/systemd/system/multi-user.target.wants/imh-sys-snap.service → /etc/systemd/system/imh-sys-snap.service.


line:
mode of '/usr/local/cpanel/whostmgr/docroot/cgi/addon_csf.cgi' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)


line:
mode of '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf.cgi' changed from 0644 (rw-r--r--) to 0700 (rwx------)


line:
/bin/cp: cannot create regular file '/var/lib/csf/backup/1736761405_pre_v14_19_upgrade': No such file or directory


line:
Synchronizing state of lfd.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/lfd.service → /usr/lib/systemd/system/lfd.service.


line:
Synchronizing state of csf.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/csf.service → /usr/lib/systemd/system/csf.service.


line:
'/etc/csf/webmin/csf/images/reseller_icon.svg' -> '/usr/local/csf/lib/webmin/csf/images/reseller_icon.svg'


line:
'/etc/csf/webmin/csf/images/configserver.css' -> '/usr/local/csf/lib/webmin/csf/images/configserver.css'


line:
'/etc/csf/webmin/csf/images/bootstrap/css/bootstrap.min.css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css/bootstrap.min.css'


line:
'/etc/csf/webmin/csf/images/bootstrap/css/bootstrap.min.css.map' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css/bootstrap.min.css.map'


line:
'/etc/csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'/etc/csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'/etc/csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'/etc/csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'/etc/csf/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'/etc/csf/webmin/csf/images/bootstrap/js/bootstrap.min.js' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/js/bootstrap.min.js'


line:
'/etc/csf/webmin/csf/images/bootstrap-chosen.css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap-chosen.css'


line:
'/etc/csf/webmin/csf/images/chosen-sprite.png' -> '/usr/local/csf/lib/webmin/csf/images/chosen-sprite.png'


line:
'/etc/csf/webmin/csf/images/chosen.min.css' -> '/usr/local/csf/lib/webmin/csf/images/chosen.min.css'


line:
'/etc/csf/webmin/csf/images/admin_icon.svg' -> '/usr/local/csf/lib/webmin/csf/images/admin_icon.svg'


line:
'/etc/csf/webmin/csf/images/chosen-sprite@2x.png' -> '/usr/local/csf/lib/webmin/csf/images/chosen-sprite@2x.png'


line:
'/etc/csf/webmin/csf/images/csf-loader.gif' -> '/usr/local/csf/lib/webmin/csf/images/csf-loader.gif'


line:
'csf/bootstrap/css/bootstrap.min.css.map' -> 'webmin/csf/images/bootstrap/css/bootstrap.min.css.map'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'da/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> 'interworx/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'webmin/csf/images/bootstrap/js/bootstrap.min.js' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/js/bootstrap.min.js'


line:
'webmin/csf/images/bootstrap/css/bootstrap.min.css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css/bootstrap.min.css'


line:
'webmin/csf/images/bootstrap/css/bootstrap.min.css.map' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/css/bootstrap.min.css.map'


line:
'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'webmin/csf/images/bootstrap-chosen.css' -> '/usr/local/csf/lib/webmin/csf/images/bootstrap-chosen.css'


line:
'webmin/csf/images/chosen-sprite@2x.png' -> '/usr/local/csf/lib/webmin/csf/images/chosen-sprite@2x.png'


line:
'ui/images/bootstrap/css/bootstrap.min.css' -> '/etc/csf/ui/./images/bootstrap/css/bootstrap.min.css'


line:
'ui/images/bootstrap/css/bootstrap.min.css.map' -> '/etc/csf/ui/./images/bootstrap/css/bootstrap.min.css.map'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/etc/csf/ui/./images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
mkdir: cannot create directory ‘/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf’: File exists


line:
'csf/bootstrap/css/bootstrap.min.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/css/bootstrap.min.css'


line:
'csf/bootstrap/css/bootstrap.min.css.map' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/css/bootstrap.min.css.map'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'csf/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'csf/bootstrap/js/bootstrap.min.js' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap/js/bootstrap.min.js'


line:
'csf/bootstrap-chosen.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/bootstrap-chosen.css'


line:
'csf/chosen-sprite.png' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/chosen-sprite.png'


line:
'csf/chosen-sprite@2x.png' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/chosen-sprite@2x.png'


line:
'csf/configserver.css' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/configserver.css'


line:
'csf/reseller_icon.svg' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/reseller_icon.svg'


line:
'cpanel/Driver/ConfigServercsf.pm' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf.pm'


line:
'cpanel/Driver/ConfigServercsf/META.pm' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf/META.pm'


line:
open3: exec of  restart lfd.service failed: No such file or directory at /usr/local/csf/lib/ConfigServer/Service.pm line 109.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 987419 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 987699 (systemd+/proc check method).


line:
/usr/local/cpanel/scripts/uninstall_plugin --theme paper_lantern /opt/backups/plugin_installers/plugin.imh


line:
/usr/local/cpanel/scripts/uninstall_plugin --theme jupiter /opt/backups/plugin_installers/plugin.imh


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1354396 (systemd+/proc check method).


line:
  reason: The package name “viaocea2_ViaPrime” does not refer to an existing package you are authorized to edit.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1354655 (systemd+/proc check method).


line:
copying files from brought_by_package_manager/fonts to /usr/local/cpanel/whostmgr/docroot/cgi/imunify/assets/static/fonts


line:
copying files from brought_by_package_manager/shared-dependencies to /usr/local/cpanel/whostmgr/docroot/cgi/imunify/assets/static/shared-dependencies


line:
copying files from brought_by_package_manager/fonts to /usr/local/cpanel/base/frontend/jupiter/imunify/assets/static/fonts


line:
copying files from brought_by_package_manager/shared-dependencies to /usr/local/cpanel/base/frontend/jupiter/imunify/assets/static/shared-dependencies


line:
ln: failed to create symbolic link '/etc/apache2/conf.d/imh-modsec/post_2.8_rules.conf': File exists


line:
	Feb 20 05:12:53 host2.viaoceanica.com systemd[1]: Starting Apache web server managed by cPanel EasyApache...


line:
	Feb 20 05:12:54 host2.viaoceanica.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory


line:
	Feb 20 05:12:54 host2.viaoceanica.com systemd[1]: Started Apache web server managed by cPanel EasyApache.


line:
	[Mon Feb 24 17:26:44.831992 2025] [security2:error] [pid 1393059:tid 1393081] [client 54.36.181.10:54846] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yr1BTzHzvyYUzUsWz8MgAAABA"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:42.515394 2025] [security2:error] [pid 1393059:tid 1393081] [client 54.36.181.10:54073] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yr0hTzHzvyYUzUsWz8KQAAABA"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:40.181731 2025] [security2:error] [pid 1393059:tid 1393083] [client 54.36.181.10:53357] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yr0BTzHzvyYUzUsWz8IwAAABI"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:37.853300 2025] [security2:error] [pid 1296742:tid 1296899] [client 54.36.181.10:52730] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrzQk57NMRHkzcgY5z_AAAAko"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:35.548890 2025] [security2:error] [pid 1296742:tid 1296907] [client 54.36.181.10:51935] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrywk57NMRHkzcgY5z7gAAAk8"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:33.241067 2025] [security2:error] [pid 1296743:tid 1296884] [client 54.36.181.10:51209] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yryUI73Sm4dGsZcxBpAgAAApU"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:31.010300 2025] [security2:error] [pid 1296742:tid 1296908] [client 130.185.77.67:54448] [client 130.185.77.67] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "cmatos.com"] [uri "/wp-login.php"] [unique_id "Z7yrxwk57NMRHkzcgY5zzwAAAlA"]


line:
	[Mon Feb 24 17:26:30.934526 2025] [security2:error] [pid 1296741:tid 1296832] [client 54.36.181.10:50512] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrxp6nBEWC8OCu2SqBXAAAAZE"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:30.470653 2025] [security2:error] [pid 1296737:tid 1296791] [client 130.185.77.67:54322] [client 130.185.77.67] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "cmatos.com"] [uri "/wp-login.php"] [unique_id "Z7yrxqgJHQPvRcwYvEQAmQAAARI"]


line:
	[Mon Feb 24 17:26:28.596846 2025] [security2:error] [pid 1393059:tid 1393083] [client 54.36.181.10:49671] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrxBTzHzvyYUzUsWz7-AAAABI"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:26.275273 2025] [security2:error] [pid 1393059:tid 1393086] [client 54.36.181.10:65408] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrwhTzHzvyYUzUsWz78wAAABQ"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:23.935873 2025] [security2:error] [pid 1296742:tid 1296914] [client 54.36.181.10:64810] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrvwk57NMRHkzcgY5zeQAAAlM"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:21.631272 2025] [security2:error] [pid 1296742:tid 1296890] [client 54.36.181.10:64110] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrvQk57NMRHkzcgY5zagAAAkU"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:19.317279 2025] [security2:error] [pid 1393059:tid 1393072] [client 54.36.181.10:63279] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yruxTzHzvyYUzUsWz7zQAAAAc"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:16.980770 2025] [security2:error] [pid 1296742:tid 1296905] [client 54.36.181.10:62493] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yruAk57NMRHkzcgY5zTgAAAk0"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:14.675390 2025] [security2:error] [pid 1296742:tid 1296907] [client 54.36.181.10:61652] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrtgk57NMRHkzcgY5zQgAAAk8"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:13.978659 2025] [security2:error] [pid 1296741:tid 1296819] [client 85.138.192.38:52888] [client 85.138.192.38] ModSecurity: Warning. Pattern match "recaptcha" at ARGS_POST_NAMES:g-recaptcha-response. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "18"] [id "13504"] [hostname "mainvet.pt"] [uri "/wp-login.php"] [unique_id "Z7yrtZ6nBEWC8OCu2SqBBQAAAYU"], referer: https://mainvet.pt/wp-login.php?redirect_to=https%3A%2F%2Fmainvet.pt%2Fwp-admin%2Fedit.php%3Fpost_type%3Dshop_order&reauth=1


line:
	[Mon Feb 24 17:26:12.346029 2025] [security2:error] [pid 1393059:tid 1393085] [client 54.36.181.10:60865] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrtBTzHzvyYUzUsWz7qwAAABM"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:10.025351 2025] [security2:error] [pid 1296743:tid 1296887] [client 54.36.181.10:60109] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrskI73Sm4dGsZcxBozwAAApY"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:07.683022 2025] [security2:error] [pid 1296742:tid 1296895] [client 54.36.181.10:59417] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrrwk57NMRHkzcgY5y7gAAAkg"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:05.351058 2025] [security2:error] [pid 1296742:tid 1296906] [client 54.36.181.10:58662] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrrQk57NMRHkzcgY5y4AAAAk4"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:03.025441 2025] [security2:error] [pid 1296742:tid 1296880] [client 54.36.181.10:57898] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrqwk57NMRHkzcgY5y0QAAAkE"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:26:00.629192 2025] [security2:error] [pid 1393059:tid 1393069] [client 54.36.181.10:57050] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrqBTzHzvyYUzUsWz7bgAAAAQ"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:58.296114 2025] [security2:error] [pid 1296742:tid 1296906] [client 54.36.181.10:56404] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrpgk57NMRHkzcgY5yrQAAAk4"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:55.966542 2025] [security2:error] [pid 1296740:tid 1296856] [client 54.36.181.10:55654] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yroy3XuVvGk4gQMouhawAAAUI"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:53.663038 2025] [security2:error] [pid 1393059:tid 1393070] [client 54.36.181.10:54764] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yroRTzHzvyYUzUsWz7VgAAAAU"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:53.418530 2025] [security2:error] [pid 1296742:tid 1296918] [client 95.163.255.57:32830] [client 95.163.255.57] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:(?:n(?:et(?:\\\\b\\\\W+?\\\\blocalgroup|\\\\.exe)|(?:map|c)\\\\.exe)|t(?:racer(?:oute|t)|elnet\\\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\\\.exe|echo\\\\b\\\\W*?\\\\by+)\\\\b|c(?:md(?:(?:32)?\\\\.exe\\\\b|\\\\b\\\\W*?\\\\/c)|d(?:\\\\b\\\\W*?[\\\\\\\\/]|\\\\W*?\\\\.\\\\.)|hmod.{0,40}? ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "178"] [id "96015"] [msg "System Command Injection"] [data "; mail"] [severity "CRITICAL"] [tag "WEB_ATTACK/COMMAND_INJECTION"] [hostname "www.hotelbeiramar.com"] [uri "/pt/"] [unique_id "Z7yroQk57NMRHkzcgY5yhAAAAlc"]


line:
	[Mon Feb 24 17:25:51.337200 2025] [security2:error] [pid 1296742:tid 1296917] [client 54.36.181.10:54022] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrnwk57NMRHkzcgY5ycAAAAlY"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:50.615540 2025] [security2:error] [pid 1393059:tid 1393086] [client 95.163.255.55:34809] [client 95.163.255.55] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:(?:n(?:et(?:\\\\b\\\\W+?\\\\blocalgroup|\\\\.exe)|(?:map|c)\\\\.exe)|t(?:racer(?:oute|t)|elnet\\\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\\\.exe|echo\\\\b\\\\W*?\\\\by+)\\\\b|c(?:md(?:(?:32)?\\\\.exe\\\\b|\\\\b\\\\W*?\\\\/c)|d(?:\\\\b\\\\W*?[\\\\\\\\/]|\\\\W*?\\\\.\\\\.)|hmod.{0,40}? ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "178"] [id "96015"] [msg "System Command Injection"] [data "; mail"] [severity "CRITICAL"] [tag "WEB_ATTACK/COMMAND_INJECTION"] [hostname "www.hotelbeiramar.com"] [uri "/robots.txt"] [unique_id "Z7yrnhTzHzvyYUzUsWz7RwAAABQ"]


line:
	[Mon Feb 24 17:25:49.034054 2025] [security2:error] [pid 1296741:tid 1296828] [client 54.36.181.10:53248] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrnZ6nBEWC8OCu2SqA2QAAAY0"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:46.708019 2025] [security2:error] [pid 1393059:tid 1393075] [client 54.36.181.10:52485] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrmhTzHzvyYUzUsWz7NgAAAAo"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:44.399314 2025] [security2:error] [pid 1296742:tid 1296908] [client 54.36.181.10:51724] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrmAk57NMRHkzcgY5yOwAAAlA"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:42.064513 2025] [security2:error] [pid 1296742:tid 1296906] [client 54.36.181.10:50990] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrlgk57NMRHkzcgY5yIwAAAk4"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:39.758824 2025] [security2:error] [pid 1296740:tid 1296904] [client 54.36.181.10:50292] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrky3XuVvGk4gQMouhUwAAAVY"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:37.446361 2025] [security2:error] [pid 1296742:tid 1296916] [client 54.36.181.10:49559] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrkQk57NMRHkzcgY5yBQAAAlU"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:35.125077 2025] [security2:error] [pid 1393059:tid 1393083] [client 54.36.181.10:65169] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrjxTzHzvyYUzUsWz7CgAAABI"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:32.800790 2025] [security2:error] [pid 1296742:tid 1296901] [client 54.36.181.10:64499] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrjAk57NMRHkzcgY5x4gAAAks"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:30.483217 2025] [security2:error] [pid 1393059:tid 1393089] [client 54.36.181.10:63855] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrihTzHzvyYUzUsWz66gAAABc"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:28.172951 2025] [security2:error] [pid 1393059:tid 1393085] [client 54.36.181.10:63095] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yriBTzHzvyYUzUsWz60wAAABM"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:25.867091 2025] [security2:error] [pid 1393059:tid 1393074] [client 54.36.181.10:62376] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrhRTzHzvyYUzUsWz6xwAAAAk"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:23.555379 2025] [security2:error] [pid 1296742:tid 1296917] [client 54.36.181.10:61777] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrgwk57NMRHkzcgY5xjwAAAlY"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:21.252177 2025] [security2:error] [pid 1296742:tid 1296918] [client 54.36.181.10:61168] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrgQk57NMRHkzcgY5xewAAAlc"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:18.937179 2025] [security2:error] [pid 1393059:tid 1393082] [client 54.36.181.10:60549] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrfhTzHzvyYUzUsWz6lAAAABE"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:16.633874 2025] [security2:error] [pid 1296737:tid 1296788] [client 54.36.181.10:59956] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrfKgJHQPvRcwYvEQAPQAAAQ8"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:14.320841 2025] [security2:error] [pid 1296743:tid 1296889] [client 54.36.181.10:59335] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrekI73Sm4dGsZcxBoXwAAApc"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:11.997926 2025] [security2:error] [pid 1393059:tid 1393090] [client 54.36.181.10:58626] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrdxTzHzvyYUzUsWz6UQAAABg"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:09.687425 2025] [security2:error] [pid 1296743:tid 1296875] [client 54.36.181.10:57896] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrdUI73Sm4dGsZcxBoUwAAApI"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:07.381797 2025] [security2:error] [pid 1296743:tid 1296861] [client 54.36.181.10:57168] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrc0I73Sm4dGsZcxBoTgAAAo0"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:05.066035 2025] [security2:error] [pid 1296742:tid 1296883] [client 54.36.181.10:56557] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrcQk57NMRHkzcgY5w7AAAAkI"], referer: http://filnor.org/wp-login.php


line:
	[Mon Feb 24 17:25:02.758322 2025] [security2:error] [pid 1296742:tid 1296913] [client 54.36.181.10:55939] [client 54.36.181.10] ModSecurity: Access denied with redirection to /mod-security-error/rule-13051.html using status 302 (phase 2). Operator GT matched 0 at RESOURCE:wpbf_block. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "139"] [id "13051"] [msg "wp_login access blocked for 900 seconds, more than 10 login attempts in 3 minutes."] [hostname "filnor.org"] [uri "/wp-login.php"] [unique_id "Z7yrbgk57NMRHkzcgY5w0gAAAlI"], referer: http://filnor.org/wp-login.php


line:
Provided event of 'Server::Type::Change::enable' in category 'Whostmgr' does not exist in hooks registry or is malformed. (this may indicate that the specified hook is not installed)


line:
Provided event of 'Server::Type::Change::disable' in category 'Whostmgr' does not exist in hooks registry or is malformed. (this may indicate that the specified hook is not installed)


line:
	[Wed Mar 05 05:09:29.058861 2025] [security2:error] [pid 2911783:tid 2911880] [client 205.210.31.250:62980] [client 205.210.31.250] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "64"] [id "96032"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [hostname "edicao2017.angrajazz.com"] [uri "/"] [unique_id "Z8fcieAhG0pxFRLaGXVzXgAAAkA"]


line:
	[Wed Mar 05 21:59:55.057264 2025] [security2:error] [pid 442450:tid 442579] [client 92.255.57.39:56940] [client 92.255.57.39] ModSecurity: Warning. Pattern match "recaptcha" at ARGS_POST_NAMES:g-recaptcha-response. [file "/etc/apache2/conf.d/imh-modsec/40_wordpress.conf"] [line "18"] [id "13504"] [hostname "uniqueazores.com"] [uri "/"] [unique_id "Z8jJW33Rmc101nkqEk9iYAAAANI"], referer: https://uniqueazores.com/


line:
	[Wed Mar 05 21:59:16.510839 2025] [security2:error] [pid 442451:tid 442556] [client 193.233.91.66:43841] [client 193.233.91.66] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "viaoceanica.com"] [uri "/wp-login.php"] [unique_id "Z8jJNLbKRR6xeSCMq58PDQAAARU"]


line:
	[Wed Mar 05 21:59:01.625076 2025] [security2:error] [pid 442451:tid 442547] [client 5.189.174.20:50144] [client 5.189.174.20] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "www.viaoceanica.com"] [uri "/canais/noticias/ilha.php"] [unique_id "Z8jJJbbKRR6xeSCMq58O4QAAAQw"]


line:
	[Wed Mar 05 21:58:39.796585 2025] [security2:error] [pid 442451:tid 442538] [client 209.227.239.70:64818] [client 209.227.239.70] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "cpanel.ccah.eu"] [uri "/.cpanel/dcv"] [unique_id "Z8jJD7bKRR6xeSCMq58OoAAAAQM"]


line:
	[Wed Mar 05 21:58:28.461832 2025] [security2:error] [pid 442447:tid 442454] [client 209.227.239.70:63552] [client 209.227.239.70] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "cpanel.ccah.eu"] [uri "/.cpanel/dcv"] [unique_id "Z8jJBNm6qnSlZIbx-XGIGwAAAAE"]


line:
	[Wed Mar 05 21:58:25.582520 2025] [security2:error] [pid 442447:tid 442475] [client 209.227.239.70:63552] [client 209.227.239.70] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "cpanel.ccah.eu"] [uri "/.cpanel/dcv"] [unique_id "Z8jJAdm6qnSlZIbx-XGIAwAAABY"]


line:
	[Wed Mar 05 21:58:08.492209 2025] [security2:error] [pid 442451:tid 442552] [client 5.189.174.20:49386] [client 5.189.174.20] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "www.viaoceanica.com"] [uri "/canais/noticias/ilha.php"] [unique_id "Z8jI8LbKRR6xeSCMq58OLgAAARE"]


line:
	[Wed Mar 05 21:58:08.062644 2025] [security2:error] [pid 442450:tid 442565] [client 5.189.174.20:49376] [client 5.189.174.20] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "68"] [id "99111"] [msg "Missing User Agent Header"] [hostname "www.viaoceanica.com"] [uri "/"] [unique_id "Z8jI733Rmc101nkqEk9hpgAAAMQ"]


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1697924 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1698132 (systemd+/proc check method).


line:
Setting up timers to enable cPanel & WHM's 360 Monitoring UI on server status changes, like license updates.


line:
Setting up timers to enable cPanel & WHM's Social Media Manager UI on server status changes, like license updates.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1724258 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1725519 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 2141744 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 2142918 (systemd+/proc check method).


line:
	Apr 03 05:12:36 host2.viaoceanica.com systemd[1]: Starting Apache web server managed by cPanel EasyApache...


line:
	Apr 03 05:12:36 host2.viaoceanica.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory


line:
	Apr 03 05:12:36 host2.viaoceanica.com systemd[1]: Started Apache web server managed by cPanel EasyApache.


line:
	[Tue Apr 08 05:10:26.257223 2025] [security2:error] [pid 3233247:tid 3233319] [client 118.128.165.171:34720] [client 118.128.165.171] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "emilianotoste.pt"] [uri "/xmlrpc.php"] [unique_id "Z_ShstNc4vb9_KJC0B8mGAAAAJM"]


line:
	[Tue Apr 08 05:10:13.959313 2025] [security2:error] [pid 3233246:tid 3233334] [client 103.74.116.72:40650] [client 103.74.116.72] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "finisterratopo.com"] [uri "/xmlrpc.php"] [unique_id "Z_ShpXwFUrq2UGqDKcVSlgAAAEc"]


line:
	[Tue Apr 08 05:09:43.319663 2025] [security2:error] [pid 3233246:tid 3233336] [client 20.205.110.167:40784] [client 20.205.110.167] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "www.competiracores.com"] [uri "/xmlrpc.php"] [unique_id "Z_Shh3wFUrq2UGqDKcVSagAAAEk"]


line:
	[Tue Apr 08 05:09:20.895626 2025] [security2:error] [pid 3233247:tid 3233324] [client 104.152.52.71:37665] [client 104.152.52.71] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^apache.*perl" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/apache2/conf.d/imh-modsec/01_base_rules.conf"] [line "64"] [id "96032"] [msg "Request Indicates an automated program explored the site"] [severity "NOTICE"] [hostname "cmatos.com"] [uri "/"] [unique_id "Z_ShcNNc4vb9_KJC0B8l1AAAAJg"]


line:
	[Tue Apr 08 05:05:46.412243 2025] [security2:error] [pid 3233246:tid 3233337] [client 47.106.243.226:56744] [client 47.106.243.226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "caminhosdasilhas.com"] [uri "/xmlrpc.php"] [unique_id "Z_SgmnwFUrq2UGqDKcVQmQAAAEo"]


line:
	[Tue Apr 08 05:04:24.616139 2025] [security2:error] [pid 3233246:tid 3233330] [client 47.106.243.226:56602] [client 47.106.243.226] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "msourcing.org"] [uri "/xmlrpc.php"] [unique_id "Z_SgSHwFUrq2UGqDKcVQOAAAAEQ"]


line:
	[Tue Apr 08 05:02:32.614841 2025] [security2:error] [pid 3233247:tid 3233324] [client 103.255.250.210:54704] [client 103.255.250.210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "Mozilla/5\\\\.0 \\\\(X11; Fedora; Linux x86_64; rv:94\\\\.0\\\\) Gecko/20100101 Firefox/95\\\\.0" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/imh-modsec/19_bad_bots.conf"] [line "72"] [id "13731"] [msg "https://jira.imhdev.com/browse/T3O2-3624"] [severity "WARNING"] [tag "WEB_ATTACK/BRUTE FORCE"] [hostname "jfconceicao.net"] [uri "/xmlrpc.php"] [unique_id "Z_Sf2NNc4vb9_KJC0B8jaQAAAJg"]


line:
	cpanel (cpsrvd (SSL) - dormant mode - accepting connections) is running as root with PID 1264 (systemd+/proc check method).


line:
	Apr 09 16:59:38 host2.viaoceanica.com sudo[1254800]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 listaccts --output=json'


line:
	Apr 09 16:59:38 host2.viaoceanica.com sudo[1254853]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'whmapi1 get_domain_info --output=json'


line:
	Apr 09 16:59:38 host2.viaoceanica.com sudo[1254891]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/urzelina/urzelina.viaoceanica.com/wp-toolkit.conf


line:
	Apr 09 16:59:38 host2.viaoceanica.com sudo[1254907]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/urzelina/urzelina.viaoceanica.com/wp-toolkit.conf


line:
	Apr 09 16:59:38 host2.viaoceanica.com sudo[1254920]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/urzelina/urzelina.viaoceanica.com/wp-toolkit.conf


line:
	Apr 09 16:59:39 host2.viaoceanica.com sudo[1254933]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -f /etc/nginx/conf.d/users/urzelina/urzelina.viaoceanica.com/wp-toolkit.conf


line:
	Apr 09 16:59:39 host2.viaoceanica.com sudo[1254944]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/find /etc/nginx/conf.d/users/urzelina/urzelina.viaoceanica.com -mindepth 1 -maxdepth 1 -printf %f\\0


line:
	Apr 09 16:59:39 host2.viaoceanica.com sudo[1254959]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /etc/nginx/conf.d/users/urzelina/urzelina.viaoceanica.com


line:
	Apr 09 16:59:39 host2.viaoceanica.com sudo[1254985]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/find /etc/nginx/conf.d/users/urzelina -mindepth 1 -maxdepth 1 -printf %f\\0


line:
	Apr 09 16:59:39 host2.viaoceanica.com sudo[1255003]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/rm -rf /etc/nginx/conf.d/users/urzelina


line:
copying module nav-root from /usr/local/cpanel/whostmgr/docroot/cgi/imunify/brought_by_package_manager to /usr/local/cpanel/base/frontend/paper_lantern/imunify/assets/static


line:
copying module other-root from /usr/local/cpanel/whostmgr/docroot/cgi/imunify/brought_by_package_manager to /usr/local/cpanel/base/frontend/paper_lantern/imunify/assets/static


line:
copying files from brought_by_package_manager/fonts to /usr/local/cpanel/base/frontend/paper_lantern/imunify/assets/static/fonts


line:
copying spa root from brought_by_package_manager/ to /usr/local/cpanel/base/frontend/paper_lantern/imunify/assets/static/


line:
copying files from brought_by_package_manager/shared-dependencies to /usr/local/cpanel/base/frontend/paper_lantern/imunify/assets/static/shared-dependencies


line:
ln -sT /opt/backups/plugin_installers/dynamicui_files.conf /usr/local/cpanel/base/frontend/paper_lantern/dynamicui/dynamicui_files.conf


line:
/usr/local/cpanel/scripts/install_plugin --theme paper_lantern /opt/backups/plugin_installers/plugin.imh


line:
mkdir: cannot create directory '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf': File exists


line:
Created symlink /etc/systemd/system/multi-user.target.wants/csf.service -> /usr/lib/systemd/system/csf.service.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/lfd.service -> /usr/lib/systemd/system/lfd.service.


line:
Apr 30 05:11:17 host2.viaoceanica.com systemd[1]: Starting ConfigServer Firewall & Security - lfd...


line:
May 06 05:11:40 host2.viaoceanica.com systemd[1]: Starting ConfigServer Firewall & Security - lfd...


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 385385 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 385675 (systemd+/proc check method).


line:
warning: /opt/cpanel/ea-php72/root/etc/php-fpm.conf created as /opt/cpanel/ea-php72/root/etc/php-fpm.conf.rpmnew


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1521034 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1525843 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 3259039 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 3261174 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1563970 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1566943 (systemd+/proc check method).


line:
AH00180: WARNING: MaxRequestWorkers of 3750 exceeds ServerLimit value of 150 servers, decreasing MaxRequestWorkers to 150. To increase, please see the ServerLimit directive.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1828903 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1829096 (systemd+/proc check method).


line:
warning: /etc/yum.repos.d/imunify360-testing.repo created as /etc/yum.repos.d/imunify360-testing.repo.rpmnew


line:
Created symlink /etc/systemd/system/sockets.target.wants/imunify-agent-proxy.socket → /usr/lib/systemd/system/imunify-agent-proxy.socket.


line:
Created symlink /etc/systemd/system/multi-user.target.wants/imunify-agent-proxy.service → /usr/lib/systemd/system/imunify-agent-proxy.service.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1110198 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1110562 (systemd+/proc check method).


line:
Adding hook for Whostmgr::Accounts::Modify to hooks registry was skipped, as hook module action 'Cpanel::Sitejet::Hooks::ChangeDomains::capture_domain_before_change' is already registered


line:
Adding hook for Whostmgr::Accounts::Modify to hooks registry was skipped, as hook module action 'Cpanel::Sitejet::Hooks::ChangeDomains::check_for_domain_change' is already registered


line:
Adding hook for Cpanel::UAPI::Domain::convert_temporary_to_registered to hooks registry was skipped, as hook module action 'Cpanel::Sitejet::Hooks::ChangeDomains::uapi_domain_change' is already registered


line:
Connecting to download-csf.imhadmin.net (download-csf.imhadmin.net)|192.249.116.254|:443... connected.


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/webmin/csf/images/plus.png: remove failed: No such file or directory


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/webmin/csf/images/perm.png: remove failed: No such file or directory


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/webmin/csf/images/minus.png: remove failed: No such file or directory


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/webmin/csf/images/ip.png: remove failed: No such file or directory


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/webmin/csf/images/icon.gif: remove failed: No such file or directory


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/webmin/csf/images/delete.png: remove failed: No such file or directory


line:
warning: file /usr/local/cpanel/whostmgr/docroot/cgi/addon_csf.cgi: remove failed: No such file or directory


line:
'ui/images/bootstrap/css/bootstrap.min.css.map' -> '/etc/csf/./ui/images/bootstrap/css/bootstrap.min.css.map'


line:
'ui/images/bootstrap/css/bootstrap.min.css' -> '/etc/csf/./ui/images/bootstrap/css/bootstrap.min.css'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.ttf'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff2'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.woff'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.eot'


line:
'ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg' -> '/etc/csf/./ui/images/bootstrap/fonts/glyphicons-halflings-regular.svg'


line:
'cpanel/Driver/ConfigServercsf' -> '/usr/local/cpanel/whostmgr/docroot/cgi/configserver/csf/Driver/ConfigServercsf'


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 143217 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 143690 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 2234875 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 2235157 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 318216 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 318417 (systemd+/proc check method).


line:
Composer (version 2.8.12) successfully installed to: /usr/local/cpanel/share/wappspector/composer.phar


line:
  - Adding dependency "dealerdirect/phpcodesniffer-composer-installer" from "vendor/dealerdirect/phpcodesniffer-composer-installer/"


line:
  - Adding dependency "sebastian/code-unit-reverse-lookup" from "vendor/sebastian/code-unit-reverse-lookup/"


line:
  - Adding dependency "symfony/polyfill-intl-grapheme" from "vendor/symfony/polyfill-intl-grapheme/"


line:
  - Adding dependency "symfony/polyfill-intl-normalizer" from "vendor/symfony/polyfill-intl-normalizer/"


line:
Adding hook for Whostmgr::Accounts::Modify to hooks registry was skipped, as hook module action 'Cpanel::Koality::Hooks::ChangeDomains::capture_domain_before_change' is already registered


line:
Adding hook for Whostmgr::Accounts::Modify to hooks registry was skipped, as hook module action 'Cpanel::Koality::Hooks::ChangeDomains::check_for_domain_change' is already registered


line:
Adding hook for Cpanel::UAPI::Domain::convert_temporary_to_registered to hooks registry was skipped, as hook module action 'Cpanel::Koality::Hooks::ChangeDomains::uapi_domain_change' is already registered


line:
Created symlink /etc/systemd/system/multi-user.target.wants/imh-node-exporter.service → /etc/systemd/system/imh-node-exporter.service.


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1652508 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 1652784 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 331059 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 331345 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 312326 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 312540 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 62506 (systemd+/proc check method).


line:
	cpanel_php_fpm (php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)) is running as root with PID 62847 (systemd+/proc check method).


line:
Created symlink /etc/systemd/system/multi-user.target.wants/imh-nrpe.service → /etc/systemd/system/imh-nrpe.service.


line:
Adding hook for Whostmgr::Accounts::Remove to hooks registry was skipped, as hook module action 'Whostmgr::CometBackup::Hooks::AccountsRemove::pre_remove' is already registered


line:
Adding hook for Whostmgr::Accounts::Remove to hooks registry was skipped, as hook module action 'Whostmgr::CometBackup::Hooks::AccountsRemove::post_remove' is already registered


line:
Please run 'cagefsctl --force-update' and 'cagefsctl --remount-all' during your next maintenance window in cagefs enabled environments.


