===== Sat Jun 7 11:33:10 +0530 2025 ===== Check that groups clsupergid and clsudoers are empty is skipped, because it has already been performed This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux8-release-current.x86_64.rpm 46 kB/s | 36 kB 00:00 Error: Problem: package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from @System conflicts with cloudlinux-release < 8.10-6 provided by cloudlinux-release-8.10-1.el8.x86_64 from @commandline - conflicting requests - problem with installed package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages) This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux8-release-current.x86_64.rpm 64 kB/s | 36 kB 00:00 Error: Problem: package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from @System conflicts with cloudlinux-release < 8.10-6 provided by cloudlinux-release-8.10-1.el8.x86_64 from @commandline - conflicting requests - problem with installed package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages) This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux8-release-current.x86_64.rpm 54 kB/s | 36 kB 00:00 Error: Problem: package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from @System conflicts with cloudlinux-release < 8.10-6 provided by cloudlinux-release-8.10-1.el8.x86_64 from @commandline - conflicting requests - problem with installed package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages) This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux8-release-current.x86_64.rpm 55 kB/s | 36 kB 00:00 Error: Problem: package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from @System conflicts with cloudlinux-release < 8.10-6 provided by cloudlinux-release-8.10-1.el8.x86_64 from @commandline - conflicting requests - problem with installed package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages) This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux8-release-current.x86_64.rpm 58 kB/s | 36 kB 00:00 Error: Problem: package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from @System conflicts with cloudlinux-release < 8.10-6 provided by cloudlinux-release-8.10-1.el8.x86_64 from @commandline - conflicting requests - problem with installed package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages) This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux8-logos-current.x86_64.rpm 111 kB/s | 377 kB 00:03 Package cloudlinux-logos-84.5-1.el8.cloudlinux.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. cloudlinux-ea4-release-latest-8.noarch.rpm 6.6 kB/s | 10 kB 00:01 Package cloudlinux-ea4-release-1-10.el8.noarch is already installed. Dependencies resolved. Nothing to do. Complete! EA4 ( EasyApache 4 - c8 ) 245 kB/s | 3.6 MB 00:15 EA4 Experimental ( EasyApache 4 - c8 ) 99 kB/s | 98 kB 00:00 cPanel Addons Production Feed 9.6 kB/s | 10 kB 00:01 cPanel Plugins project 152 kB/s | 517 kB 00:03 created by dnf config-manager from https://1.mi 355 kB/s | 3.0 MB 00:08 MariaDB1011 286 kB/s | 627 kB 00:02 AlmaLinux 8.10 - AppStream 2.0 MB/s | 19 MB 00:09 AlmaLinux 8.10 - BaseOS 1.7 MB/s | 26 MB 00:15 AlmaLinux 8.10 - PowerTools 1.4 MB/s | 4.6 MB 00:03 CloudLinux 8 EasyApache4 334 kB/s | 8.7 MB 00:26 CloudLinux-EA4-8 - Gradual Rollout Slot 1 443 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 2 460 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 3 407 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 4 407 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 5 457 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 6 469 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 7 457 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 8 430 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 9 449 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 10 424 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 11 448 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 12 449 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 13 436 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 14 463 B/s | 257 B 00:00 Extra Packages for Enterprise Linux 8 - x86_64 1.7 MB/s | 14 MB 00:08 Imunify360 - Gradual Rollout Slot 5 193 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 241 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 7 249 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 8 262 B/s | 257 B 00:00 Imunify360 - Gradual Rollout Slot 1 234 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 2 284 B/s | 257 B 00:00 Imunify360 - Gradual Rollout Slot 3 266 B/s | 257 B 00:00 Imunify360 - Gradual Rollout Slot 4 246 B/s | 257 B 00:01 EL-8 - Imunify360 301 kB/s | 6.8 MB 00:23 nginx stable repo 87 kB/s | 85 kB 00:00 Repo for rpm-deathwatch owned by kwalker 5.9 kB/s | 3.1 kB 00:00 WP Toolkit for cPanel 48 kB/s | 105 kB 00:02 WP Toolkit third parties 6.0 kB/s | 7.8 kB 00:01 Package dnf-plugins-core-4.0.21-25.el8.noarch is already installed. Dependencies resolved. Nothing to do. Complete! Configuring Base repo: https://1.mirror.g.cdn.mycache.org/cloudlinux/8/BaseOS/x86_64/os/ Note: Base repo name: 1.mirror.g.cdn.mycache.org_cloudlinux_8_BaseOS_x86_64_os_ This system is not subscribed to any channels. SystemId could not be acquired. You can use rhn_register to register. CloudLinux Network based repositories will be disabled. 220 files removed kernel flavour kernel-core This system is not registered with CloudLinux Network server. CloudLinux Network based repositories will be disabled. created by dnf config-manager from https://1.mi 366 kB/s | 3.0 MB 00:08 AlmaLinux 8.10 - AppStream 3.0 MB/s | 19 MB 00:06 AlmaLinux 8.10 - BaseOS 2.9 MB/s | 26 MB 00:09 Last metadata expiration check: 0:00:01 ago on Sat 07 Jun 2025 11:36:45 AM +0530. Dependencies resolved. Nothing to do. Complete! This system is not registered with CloudLinux Network server. CloudLinux Network based repositories will be disabled. Last metadata expiration check: 0:00:06 ago on Sat 07 Jun 2025 11:36:45 AM +0530. Package dnf-4.7.0-21.el8_10.alma.1.noarch is already installed. Dependencies resolved. Nothing to do. Complete! This system is not registered with CloudLinux Network server. CloudLinux Network based repositories will be disabled. Last metadata expiration check: 0:00:08 ago on Sat 07 Jun 2025 11:36:45 AM +0530. Package dnf-plugin-spacewalk-1:2.8.5-11.module_el8.10.0+6903+9b04c6df.cloudlinux.6.noarch is already installed. Package dnf-plugin-spacewalk-1:2.8.5-11.module_el8.9.0+6803+3ddf2832.cloudlinux.5.noarch is already installed. Package rhn-setup-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 is already installed. Dependencies resolved. Nothing to do. Complete! Registering as CloudLinux shared Success Updating all packages.. This system is receiving updates from CloudLinux Network server. EA4 ( EasyApache 4 - c8 ) 795 kB/s | 3.6 MB 00:04 EA4 Experimental ( EasyApache 4 - c8 ) 50 kB/s | 98 kB 00:01 cPanel Addons Production Feed 10 kB/s | 10 kB 00:00 cPanel Plugins project 96 kB/s | 517 kB 00:05 CloudLinux Server 8 x86_64 739 kB/s | 81 MB 01:51 MariaDB1011 294 kB/s | 627 kB 00:02 AlmaLinux 8.10 - PowerTools 1.4 MB/s | 4.6 MB 00:03 CloudLinux 8 EasyApache4 431 kB/s | 8.7 MB 00:20 CloudLinux-EA4-8 - Gradual Rollout Slot 1 439 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 2 446 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 3 447 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 4 461 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 5 454 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 6 462 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 7 456 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 8 454 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 9 447 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 10 451 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 11 456 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 12 460 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 13 456 B/s | 257 B 00:00 CloudLinux-EA4-8 - Gradual Rollout Slot 14 411 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 1 370 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 2 446 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 3 470 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 4 470 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 5 449 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 6 453 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 7 452 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 8 455 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 9 445 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 10 449 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 11 449 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 12 456 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 13 449 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 14 437 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 15 442 B/s | 257 B 00:00 CloudLinux-8 - Gradual Rollout Slot 16 452 B/s | 257 B 00:00 Extra Packages for Enterprise Linux 8 - x86_64 2.2 MB/s | 14 MB 00:06 Imunify360 - Gradual Rollout Slot 5 192 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 231 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 7 264 B/s | 257 B 00:00 Imunify360 - Gradual Rollout Slot 8 228 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 1 265 B/s | 257 B 00:00 Imunify360 - Gradual Rollout Slot 2 228 B/s | 257 B 00:01 Imunify360 - Gradual Rollout Slot 3 285 B/s | 257 B 00:00 Imunify360 - Gradual Rollout Slot 4 273 B/s | 257 B 00:00 EL-8 - Imunify360 317 kB/s | 6.8 MB 00:22 nginx stable repo 89 kB/s | 85 kB 00:00 Repo for rpm-deathwatch owned by kwalker 6.5 kB/s | 3.1 kB 00:00 WP Toolkit for cPanel 51 kB/s | 105 kB 00:02 WP Toolkit third parties 7.8 kB/s | 7.8 kB 00:00 Dependencies resolved. ========================================================================================================== Package Arch Version Repository Size ========================================================================================================== Upgrading: alt-curlssl11 x86_64 8.13.0-1.el8 cloudlinux-x86_64-server-8 325 k alt-freetds11 x86_64 1.4.26-1.el8 cloudlinux-x86_64-server-8 454 k alt-libwebp x86_64 1.5.0-1.el8 cloudlinux-x86_64-server-8 373 k alt-libxml2 x86_64 2.10.2-5.el8 cloudlinux-x86_64-server-8 663 k alt-libzip x86_64 1.10.1-2.el8 cloudlinux-x86_64-server-8 71 k alt-openssl-libs x86_64 1:1.0.2u-1.el8 cloudlinux-x86_64-server-8 2.6 M alt-pcre2 x86_64 10.34-1.el8 cloudlinux-x86_64-server-8 251 k apr x86_64 1:1.6.3-12.el8.cloudlinux cloudlinux-x86_64-server-8 129 k ea-brotli x86_64 1:1.0.9-2.el8.cloudlinux cl-ea4 601 k ea-libmcrypt x86_64 1:2.5.8-5.el8.cloudlinux.2 cl-ea4 89 k ea-nghttp2 x86_64 1:1.65.0-1.el8.cloudlinux cl-ea4 11 k ea-php72 x86_64 1:7.2.34-2.el8.cloudlinux.2 cl-ea4 12 k ea-php72-php-bcmath x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 51 k ea-php72-php-calendar x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 38 k ea-php72-php-curl x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 58 k ea-php72-php-exif x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 55 k ea-php72-php-fileinfo x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 250 k ea-php72-php-gd x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 150 k ea-php72-php-iconv x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 43 k ea-php72-php-imap x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 58 k ea-php72-php-intl x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 182 k ea-php72-php-ioncube10 x86_64 1:10.4.5-2.el8.cloudlinux cl-ea4 460 k ea-php72-php-mbstring x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 583 k ea-php72-php-mysqlnd x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 175 k ea-php72-php-opcache x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 199 k ea-php72-php-soap x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 152 k ea-php72-php-sockets x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 60 k ea-php72-php-xmlrpc x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 62 k ea-php72-php-zip x86_64 1:7.2.34-9.el8.cloudlinux.7 cl-ea4 49 k ea-php73 x86_64 1:7.3.33-1.el8.cloudlinux.2 cl-ea4 10 k ea-php73-php-bcmath x86_64 1:7.3.33-13.el8.cloudlinux.4 cl-ea4 45 k ea-php73-php-calendar x86_64 1:7.3.33-13.el8.cloudlinux.4 cl-ea4 33 k ea-php73-php-curl x86_64 1:7.3.33-13.el8.cloudlinux.4 cl-ea4 53 k ea-php73-php-exif x86_64 1:7.3.33-13.el8.cloudlinux.4 cl-ea4 50 k ea-php73-php-fileinfo x86_64 1:7.3.33-13.el8.cloudlinux.4 cl-ea4 258 k kernel-headers x86_64 1:4.18.0-553.50.1.lve.el8 cloudlinux-x86_64-server-8 12 M kmod-libs x86_64 2:25-20.el8.cloudlinux.1 cloudlinux-x86_64-server-8 68 k python3-perf x86_64 1:4.18.0-553.50.1.lve.el8 cloudlinux-x86_64-server-8 11 M python3-rhnlib noarch 2.8.6-8.module_el8.10.0+6858+3ddf2832 cloudlinux-x86_64-server-8 76 k rhnsd x86_64 5.0.35-3.module_el8.10.0+6858+3ddf2832 cloudlinux-x86_64-server-8 50 k Transaction Summary ========================================================================================================== Upgrade 40 Packages Total download size: 31 M Downloading Packages: (1/40): alt-curlssl11-8.13.0-1.el8.x86_64.rpm 338 kB/s | 325 kB 00:00 (2/40): alt-libwebp-1.5.0-1.el8.x86_64.rpm 333 kB/s | 373 kB 00:01 (3/40): alt-freetds11-1.4.26-1.el8.x86_64.rpm 375 kB/s | 454 kB 00:01 (4/40): alt-libzip-1.10.1-2.el8.x86_64.rpm 369 kB/s | 71 kB 00:00 (5/40): alt-pcre2-10.34-1.el8.x86_64.rpm 570 kB/s | 251 kB 00:00 (6/40): alt-libxml2-2.10.2-5.el8.x86_64.rpm 692 kB/s | 663 kB 00:00 (7/40): apr-1.6.3-12.el8.cloudlinux.x86_64.rpm 408 kB/s | 129 kB 00:00 (8/40): kmod-libs-25-20.el8.cloudlinux.1.x86_64 329 kB/s | 68 kB 00:00 (9/40): alt-openssl-libs-1.0.2u-1.el8.x86_64.rp 704 kB/s | 2.6 MB 00:03 (10/40): python3-rhnlib-2.8.6-8.module_el8.10.0 379 kB/s | 76 kB 00:00 (11/40): rhnsd-5.0.35-3.module_el8.10.0+6858+3d 273 kB/s | 50 kB 00:00 (12/40): python3-perf-4.18.0-553.50.1.lve.el8.x 1.5 MB/s | 11 MB 00:06 (13/40): kernel-headers-4.18.0-553.50.1.lve.el8 1.4 MB/s | 12 MB 00:08 (14/40): ea-libmcrypt-2.5.8-5.el8.cloudlinux.2. 69 kB/s | 89 kB 00:01 (15/40): ea-brotli-1.0.9-2.el8.cloudlinux.x86_6 113 kB/s | 601 kB 00:05 (16/40): ea-nghttp2-1.65.0-1.el8.cloudlinux.x86 54 kB/s | 11 kB 00:00 (17/40): ea-php72-7.2.34-2.el8.cloudlinux.2.x86 24 kB/s | 12 kB 00:00 (18/40): ea-php72-php-bcmath-7.2.34-9.el8.cloud 137 kB/s | 51 kB 00:00 (19/40): ea-php72-php-calendar-7.2.34-9.el8.clo 80 kB/s | 38 kB 00:00 (20/40): ea-php72-php-exif-7.2.34-9.el8.cloudli 144 kB/s | 55 kB 00:00 (21/40): ea-php72-php-curl-7.2.34-9.el8.cloudli 118 kB/s | 58 kB 00:00 (22/40): ea-php72-php-iconv-7.2.34-9.el8.cloudl 109 kB/s | 43 kB 00:00 (23/40): ea-php72-php-imap-7.2.34-9.el8.cloudli 114 kB/s | 58 kB 00:00 (24/40): ea-php72-php-gd-7.2.34-9.el8.cloudlinu 103 kB/s | 150 kB 00:01 (25/40): ea-php72-php-intl-7.2.34-9.el8.cloudli 129 kB/s | 182 kB 00:01 (26/40): ea-php72-php-fileinfo-7.2.34-9.el8.clo 74 kB/s | 250 kB 00:03 (27/40): ea-php72-php-mysqlnd-7.2.34-9.el8.clou 127 kB/s | 175 kB 00:01 (28/40): ea-php72-php-ioncube10-10.4.5-2.el8.cl 127 kB/s | 460 kB 00:03 (29/40): ea-php72-php-opcache-7.2.34-9.el8.clou 143 kB/s | 199 kB 00:01 (30/40): ea-php72-php-mbstring-7.2.34-9.el8.clo 164 kB/s | 583 kB 00:03 (31/40): ea-php72-php-soap-7.2.34-9.el8.cloudli 132 kB/s | 152 kB 00:01 (32/40): ea-php72-php-xmlrpc-7.2.34-9.el8.cloud 159 kB/s | 62 kB 00:00 (33/40): ea-php73-7.3.33-1.el8.cloudlinux.2.x86 53 kB/s | 10 kB 00:00 (34/40): ea-php72-php-zip-7.2.34-9.el8.cloudlin 140 kB/s | 49 kB 00:00 (35/40): ea-php72-php-sockets-7.2.34-9.el8.clou 67 kB/s | 60 kB 00:00 (36/40): ea-php73-php-bcmath-7.3.33-13.el8.clou 133 kB/s | 45 kB 00:00 (37/40): ea-php73-php-calendar-7.3.33-13.el8.cl 95 kB/s | 33 kB 00:00 (38/40): ea-php73-php-curl-7.3.33-13.el8.cloudl 154 kB/s | 53 kB 00:00 (39/40): ea-php73-php-exif-7.3.33-13.el8.cloudl 65 kB/s | 50 kB 00:00 (40/40): ea-php73-php-fileinfo-7.3.33-13.el8.cl 129 kB/s | 258 kB 00:02 -------------------------------------------------------------------------------- Total 1.5 MB/s | 31 MB 00:20 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. usermod: no changes Running transaction Preparing : 1/1 Running scriptlet: ea-php73-php-fileinfo-1:7.3.33-13.el8.cloudlinux.4.x 1/1 Upgrading : ea-php73-php-fileinfo-1:7.3.33-13.el8.cloudlinux.4 1/80 Upgrading : ea-php73-php-exif-1:7.3.33-13.el8.cloudlinux.4.x86 2/80 Upgrading : ea-php73-php-curl-1:7.3.33-13.el8.cloudlinux.4.x86 3/80 Upgrading : ea-php73-php-calendar-1:7.3.33-13.el8.cloudlinux.4 4/80 Upgrading : ea-php73-php-bcmath-1:7.3.33-13.el8.cloudlinux.4.x 5/80 Upgrading : ea-php73-1:7.3.33-1.el8.cloudlinux.2.x86_64 6/80 Upgrading : ea-php72-php-zip-1:7.2.34-9.el8.cloudlinux.7.x86_6 7/80 Upgrading : ea-php72-php-xmlrpc-1:7.2.34-9.el8.cloudlinux.7.x8 8/80 Upgrading : ea-php72-php-sockets-1:7.2.34-9.el8.cloudlinux.7.x 9/80 Upgrading : ea-php72-php-soap-1:7.2.34-9.el8.cloudlinux.7.x86_ 10/80 Upgrading : ea-php72-php-opcache-1:7.2.34-9.el8.cloudlinux.7.x 11/80 Upgrading : ea-php72-php-mysqlnd-1:7.2.34-9.el8.cloudlinux.7.x 12/80 Upgrading : ea-php72-php-mbstring-1:7.2.34-9.el8.cloudlinux.7. 13/80 Upgrading : ea-php72-php-ioncube10-1:10.4.5-2.el8.cloudlinux.x 14/80 Upgrading : ea-php72-php-intl-1:7.2.34-9.el8.cloudlinux.7.x86_ 15/80 Upgrading : ea-php72-php-imap-1:7.2.34-9.el8.cloudlinux.7.x86_ 16/80 Upgrading : ea-php72-php-iconv-1:7.2.34-9.el8.cloudlinux.7.x86 17/80 Upgrading : ea-php72-php-gd-1:7.2.34-9.el8.cloudlinux.7.x86_64 18/80 Upgrading : ea-php72-php-fileinfo-1:7.2.34-9.el8.cloudlinux.7. 19/80 Upgrading : ea-php72-php-exif-1:7.2.34-9.el8.cloudlinux.7.x86_ 20/80 Upgrading : ea-php72-php-curl-1:7.2.34-9.el8.cloudlinux.7.x86_ 21/80 Upgrading : ea-php72-php-calendar-1:7.2.34-9.el8.cloudlinux.7. 22/80 Upgrading : ea-php72-php-bcmath-1:7.2.34-9.el8.cloudlinux.7.x8 23/80 Upgrading : ea-php72-1:7.2.34-2.el8.cloudlinux.2.x86_64 24/80 Upgrading : ea-nghttp2-1:1.65.0-1.el8.cloudlinux.x86_64 25/80 Upgrading : ea-libmcrypt-1:2.5.8-5.el8.cloudlinux.2.x86_64 26/80 Running scriptlet: ea-libmcrypt-1:2.5.8-5.el8.cloudlinux.2.x86_64 26/80 Upgrading : ea-brotli-1:1.0.9-2.el8.cloudlinux.x86_64 27/80 Upgrading : rhnsd-5.0.35-3.module_el8.10.0+6858+3ddf2832.x86_6 28/80 Running scriptlet: rhnsd-5.0.35-3.module_el8.10.0+6858+3ddf2832.x86_6 28/80 Upgrading : python3-rhnlib-2.8.6-8.module_el8.10.0+6858+3ddf28 29/80 Upgrading : python3-perf-1:4.18.0-553.50.1.lve.el8.x86_64 30/80 Upgrading : kmod-libs-2:25-20.el8.cloudlinux.1.x86_64 31/80 Running scriptlet: kmod-libs-2:25-20.el8.cloudlinux.1.x86_64 31/80 Upgrading : kernel-headers-1:4.18.0-553.50.1.lve.el8.x86_64 32/80 Upgrading : apr-1:1.6.3-12.el8.cloudlinux.x86_64 33/80 Running scriptlet: apr-1:1.6.3-12.el8.cloudlinux.x86_64 33/80 Upgrading : alt-pcre2-10.34-1.el8.x86_64 34/80 Running scriptlet: alt-pcre2-10.34-1.el8.x86_64 34/80 Running scriptlet: alt-openssl-libs-1:1.0.2u-1.el8.x86_64 35/80 Upgrading : alt-openssl-libs-1:1.0.2u-1.el8.x86_64 35/80 Upgrading : alt-libzip-1.10.1-2.el8.x86_64 36/80 Upgrading : alt-libxml2-2.10.2-5.el8.x86_64 37/80 Upgrading : alt-libwebp-1.5.0-1.el8.x86_64 38/80 Upgrading : alt-freetds11-1.4.26-1.el8.x86_64 39/80 Running scriptlet: alt-freetds11-1.4.26-1.el8.x86_64 39/80 Upgrading : alt-curlssl11-8.13.0-1.el8.x86_64 40/80 Cleanup : ea-php73-php-fileinfo-7.3.33-13.17.2.cpanel.x86_64 41/80 Cleanup : ea-php73-php-exif-7.3.33-13.17.2.cpanel.x86_64 42/80 Cleanup : ea-php73-php-curl-7.3.33-13.17.2.cpanel.x86_64 43/80 Cleanup : ea-php73-php-calendar-7.3.33-13.17.2.cpanel.x86_64 44/80 Cleanup : ea-php73-php-bcmath-7.3.33-13.17.2.cpanel.x86_64 45/80 Cleanup : ea-php73-7.3.33-2.7.1.cpanel.x86_64 46/80 Cleanup : ea-php72-php-zip-7.2.34-10.12.9.cpanel.x86_64 47/80 Cleanup : ea-php72-php-xmlrpc-7.2.34-10.12.9.cpanel.x86_64 48/80 Cleanup : ea-php72-php-sockets-7.2.34-10.12.9.cpanel.x86_64 49/80 Cleanup : ea-php72-php-soap-7.2.34-10.12.9.cpanel.x86_64 50/80 Cleanup : ea-php72-php-opcache-7.2.34-10.12.9.cpanel.x86_64 51/80 Cleanup : ea-php72-php-mysqlnd-7.2.34-10.12.9.cpanel.x86_64 52/80 Cleanup : ea-php72-php-mbstring-7.2.34-10.12.9.cpanel.x86_64 53/80 Cleanup : ea-php72-php-ioncube10-10.4.5-7.9.2.cpanel.x86_64 54/80 Cleanup : ea-php72-php-intl-7.2.34-10.12.9.cpanel.x86_64 55/80 Cleanup : ea-php72-php-imap-7.2.34-10.12.9.cpanel.x86_64 56/80 Cleanup : ea-php72-php-iconv-7.2.34-10.12.9.cpanel.x86_64 57/80 Cleanup : ea-php72-php-gd-7.2.34-10.12.9.cpanel.x86_64 58/80 Cleanup : ea-php72-php-fileinfo-7.2.34-10.12.9.cpanel.x86_64 59/80 Cleanup : ea-php72-php-exif-7.2.34-10.12.9.cpanel.x86_64 60/80 Cleanup : ea-php72-php-curl-7.2.34-10.12.9.cpanel.x86_64 61/80 Cleanup : ea-php72-php-calendar-7.2.34-10.12.9.cpanel.x86_64 62/80 Cleanup : ea-php72-php-bcmath-7.2.34-10.12.9.cpanel.x86_64 63/80 Cleanup : ea-php72-7.2.34-3.3.15.cpanel.x86_64 64/80 Cleanup : ea-nghttp2-1.64.0-1.1.1.cpanel.x86_64 65/80 Cleanup : python3-rhnlib-2.8.6-8.module_el8.9.0+6803+3ddf283 66/80 Cleanup : kernel-headers-4.18.0-553.54.1.el8_10.x86_64 67/80 Cleanup : alt-pcre2-10.33-1.el8.x86_64 68/80 Running scriptlet: alt-pcre2-10.33-1.el8.x86_64 68/80 Cleanup : alt-openssl-libs-1:1.0.2k-2.el8.cloudlinux.10.x86_ 69/80 Cleanup : alt-libzip-1.3.2-1.el8.x86_64 70/80 Cleanup : alt-libxml2-2.9.7-2.el8.x86_64 71/80 Cleanup : alt-freetds11-1.1.24-1.el8.x86_64 72/80 Running scriptlet: alt-freetds11-1.1.24-1.el8.x86_64 72/80 Cleanup : ea-libmcrypt-2.5.8-5.5.112.cpanel.x86_64 73/80 Running scriptlet: ea-libmcrypt-2.5.8-5.5.112.cpanel.x86_64 73/80 Cleanup : ea-brotli-1.0.9-2.2.18.cpanel.x86_64 74/80 Running scriptlet: rhnsd-5.0.35-3.module_el8.9.0+6803+3ddf2832.x86_64 75/80 Cleanup : rhnsd-5.0.35-3.module_el8.9.0+6803+3ddf2832.x86_64 75/80 Running scriptlet: rhnsd-5.0.35-3.module_el8.9.0+6803+3ddf2832.x86_64 75/80 Cleanup : python3-perf-4.18.0-553.54.1.el8_10.x86_64 76/80 Cleanup : kmod-libs-25-20.el8.x86_64 77/80 Running scriptlet: kmod-libs-25-20.el8.x86_64 77/80 Cleanup : apr-1.6.3-12.el8.x86_64 78/80 Running scriptlet: apr-1.6.3-12.el8.x86_64 78/80 Cleanup : alt-libwebp-1.2.2-1.el8.x86_64 79/80 Cleanup : alt-curlssl11-7.87.0-1.el8.x86_64 80/80 Running scriptlet: alt-libxml2-2.10.2-5.el8.x86_64 80/80 Running scriptlet: alt-curlssl11-7.87.0-1.el8.x86_64 80/80 Verifying : alt-curlssl11-8.13.0-1.el8.x86_64 1/80 Verifying : alt-curlssl11-7.87.0-1.el8.x86_64 2/80 Verifying : alt-freetds11-1.4.26-1.el8.x86_64 3/80 Verifying : alt-freetds11-1.1.24-1.el8.x86_64 4/80 Verifying : alt-libwebp-1.5.0-1.el8.x86_64 5/80 Verifying : alt-libwebp-1.2.2-1.el8.x86_64 6/80 Verifying : alt-libxml2-2.10.2-5.el8.x86_64 7/80 Verifying : alt-libxml2-2.9.7-2.el8.x86_64 8/80 Verifying : alt-libzip-1.10.1-2.el8.x86_64 9/80 Verifying : alt-libzip-1.3.2-1.el8.x86_64 10/80 Verifying : alt-openssl-libs-1:1.0.2u-1.el8.x86_64 11/80 Verifying : alt-openssl-libs-1:1.0.2k-2.el8.cloudlinux.10.x86_ 12/80 Verifying : alt-pcre2-10.34-1.el8.x86_64 13/80 Verifying : alt-pcre2-10.33-1.el8.x86_64 14/80 Verifying : apr-1:1.6.3-12.el8.cloudlinux.x86_64 15/80 Verifying : apr-1.6.3-12.el8.x86_64 16/80 Verifying : kernel-headers-1:4.18.0-553.50.1.lve.el8.x86_64 17/80 Verifying : kernel-headers-4.18.0-553.54.1.el8_10.x86_64 18/80 Verifying : kmod-libs-2:25-20.el8.cloudlinux.1.x86_64 19/80 Verifying : kmod-libs-25-20.el8.x86_64 20/80 Verifying : python3-perf-1:4.18.0-553.50.1.lve.el8.x86_64 21/80 Verifying : python3-perf-4.18.0-553.54.1.el8_10.x86_64 22/80 Verifying : python3-rhnlib-2.8.6-8.module_el8.10.0+6858+3ddf28 23/80 Verifying : python3-rhnlib-2.8.6-8.module_el8.9.0+6803+3ddf283 24/80 Verifying : rhnsd-5.0.35-3.module_el8.10.0+6858+3ddf2832.x86_6 25/80 Verifying : rhnsd-5.0.35-3.module_el8.9.0+6803+3ddf2832.x86_64 26/80 Verifying : ea-brotli-1:1.0.9-2.el8.cloudlinux.x86_64 27/80 Verifying : ea-brotli-1.0.9-2.2.18.cpanel.x86_64 28/80 Verifying : ea-libmcrypt-1:2.5.8-5.el8.cloudlinux.2.x86_64 29/80 Verifying : ea-libmcrypt-2.5.8-5.5.112.cpanel.x86_64 30/80 Verifying : ea-nghttp2-1:1.65.0-1.el8.cloudlinux.x86_64 31/80 Verifying : ea-nghttp2-1.64.0-1.1.1.cpanel.x86_64 32/80 Verifying : ea-php72-1:7.2.34-2.el8.cloudlinux.2.x86_64 33/80 Verifying : ea-php72-7.2.34-3.3.15.cpanel.x86_64 34/80 Verifying : ea-php72-php-bcmath-1:7.2.34-9.el8.cloudlinux.7.x8 35/80 Verifying : ea-php72-php-bcmath-7.2.34-10.12.9.cpanel.x86_64 36/80 Verifying : ea-php72-php-calendar-1:7.2.34-9.el8.cloudlinux.7. 37/80 Verifying : ea-php72-php-calendar-7.2.34-10.12.9.cpanel.x86_64 38/80 Verifying : ea-php72-php-curl-1:7.2.34-9.el8.cloudlinux.7.x86_ 39/80 Verifying : ea-php72-php-curl-7.2.34-10.12.9.cpanel.x86_64 40/80 Verifying : ea-php72-php-exif-1:7.2.34-9.el8.cloudlinux.7.x86_ 41/80 Verifying : ea-php72-php-exif-7.2.34-10.12.9.cpanel.x86_64 42/80 Verifying : ea-php72-php-fileinfo-1:7.2.34-9.el8.cloudlinux.7. 43/80 Verifying : ea-php72-php-fileinfo-7.2.34-10.12.9.cpanel.x86_64 44/80 Verifying : ea-php72-php-gd-1:7.2.34-9.el8.cloudlinux.7.x86_64 45/80 Verifying : ea-php72-php-gd-7.2.34-10.12.9.cpanel.x86_64 46/80 Verifying : ea-php72-php-iconv-1:7.2.34-9.el8.cloudlinux.7.x86 47/80 Verifying : ea-php72-php-iconv-7.2.34-10.12.9.cpanel.x86_64 48/80 Verifying : ea-php72-php-imap-1:7.2.34-9.el8.cloudlinux.7.x86_ 49/80 Verifying : ea-php72-php-imap-7.2.34-10.12.9.cpanel.x86_64 50/80 Verifying : ea-php72-php-intl-1:7.2.34-9.el8.cloudlinux.7.x86_ 51/80 Verifying : ea-php72-php-intl-7.2.34-10.12.9.cpanel.x86_64 52/80 Verifying : ea-php72-php-ioncube10-1:10.4.5-2.el8.cloudlinux.x 53/80 Verifying : ea-php72-php-ioncube10-10.4.5-7.9.2.cpanel.x86_64 54/80 Verifying : ea-php72-php-mbstring-1:7.2.34-9.el8.cloudlinux.7. 55/80 Verifying : ea-php72-php-mbstring-7.2.34-10.12.9.cpanel.x86_64 56/80 Verifying : ea-php72-php-mysqlnd-1:7.2.34-9.el8.cloudlinux.7.x 57/80 Verifying : ea-php72-php-mysqlnd-7.2.34-10.12.9.cpanel.x86_64 58/80 Verifying : ea-php72-php-opcache-1:7.2.34-9.el8.cloudlinux.7.x 59/80 Verifying : ea-php72-php-opcache-7.2.34-10.12.9.cpanel.x86_64 60/80 Verifying : ea-php72-php-soap-1:7.2.34-9.el8.cloudlinux.7.x86_ 61/80 Verifying : ea-php72-php-soap-7.2.34-10.12.9.cpanel.x86_64 62/80 Verifying : ea-php72-php-sockets-1:7.2.34-9.el8.cloudlinux.7.x 63/80 Verifying : ea-php72-php-sockets-7.2.34-10.12.9.cpanel.x86_64 64/80 Verifying : ea-php72-php-xmlrpc-1:7.2.34-9.el8.cloudlinux.7.x8 65/80 Verifying : ea-php72-php-xmlrpc-7.2.34-10.12.9.cpanel.x86_64 66/80 Verifying : ea-php72-php-zip-1:7.2.34-9.el8.cloudlinux.7.x86_6 67/80 Verifying : ea-php72-php-zip-7.2.34-10.12.9.cpanel.x86_64 68/80 Verifying : ea-php73-1:7.3.33-1.el8.cloudlinux.2.x86_64 69/80 Verifying : ea-php73-7.3.33-2.7.1.cpanel.x86_64 70/80 Verifying : ea-php73-php-bcmath-1:7.3.33-13.el8.cloudlinux.4.x 71/80 Verifying : ea-php73-php-bcmath-7.3.33-13.17.2.cpanel.x86_64 72/80 Verifying : ea-php73-php-calendar-1:7.3.33-13.el8.cloudlinux.4 73/80 Verifying : ea-php73-php-calendar-7.3.33-13.17.2.cpanel.x86_64 74/80 Verifying : ea-php73-php-curl-1:7.3.33-13.el8.cloudlinux.4.x86 75/80 Verifying : ea-php73-php-curl-7.3.33-13.17.2.cpanel.x86_64 76/80 Verifying : ea-php73-php-exif-1:7.3.33-13.el8.cloudlinux.4.x86 77/80 Verifying : ea-php73-php-exif-7.3.33-13.17.2.cpanel.x86_64 78/80 Verifying : ea-php73-php-fileinfo-1:7.3.33-13.el8.cloudlinux.4 79/80 Verifying : ea-php73-php-fileinfo-7.3.33-13.17.2.cpanel.x86_64 80/80usermod: no changes Purging all relevant cached command results Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-V Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-l Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-v Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-L Rebuilding global cache Building global cache for cpanel...Done Nothing to do (/etc/suphp.conf does not exist) Built /etc/apache2/conf/httpd.conf OK Nothing to do under ea4 (this script has been deprecated under ea4). Fix mailman package directories … … PID 1789595 Fix mailing list perms … … PID 1789597 Aligning modsec config to Whostmgr - Whostmgr version 11.126.0.19 - Whostmgr supports conf.d/modsec location - No change necessary Waiting for “httpd” to restart gracefully …waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 1773555 (systemd+/proc check method). Startup Log Jun 07 11:00:30 host2.phenomhost.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... Jun 07 11:00:31 host2.phenomhost.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory Jun 07 11:00:31 host2.phenomhost.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Sat Jun 07 11:31:06.471442 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:30:33.447461 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.812003 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.445040 2025] [security2:notice] [pid 1773541:tid 1773541] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 10:45:29.234751 2025] [security2:error] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:29.225748 2025] [security2:error] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:20.027736 2025] [security2:error] [pid 1727663:tid 1727663] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK6BxNfM0Tz8Vs-NoF9wAAAAE"] [Sat Jun 07 10:45:11.990794 2025] [security2:error] [pid 1727975:tid 1727975] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK33Km65MOZNaRZCOVyQAAAAo"] [Sat Jun 07 10:45:10.188552 2025] [security2:error] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] [Sat Jun 07 10:45:10.187726 2025] [security2:error] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] httpd restarted successfully. Setting /home permissions to 0711 … Setting permissions for users … secondco … gaminispring … hspices … asllogistics … dragon … newlezzarotech … smartenglish … bbicecreams … topviewl … buildbywebitra … leprosycampaignh … agentallianz … radixlk … buddhika … asrgroup … colourmarklabels … sivagnanamfounda … royalgua … rockstic … colperlab … nccphealthgov … nsteeleng … euroentertainmen … jayameta … tradeceylon … dataesit … sadaroex … nirmalsa … yummykin … aathitea … happypuppyvet … vdeploy … maximsholdings … ajsstarlog … newlmdha … askinternational … myproteinbox … ambitionglobalfi … nsclatex … cloudtourssrilan … danishlk … kiriaswa … centralc … jrdclk … ceylondigest … gemtrails … saara … kadumbin … monarchdss … ksoftweb … sunriselanka … sysnytech … linayast … neotech … webitran … lkdeacom … ayuzonelanka … fhbhealt … kamechot … idealist … partsfinder … simpurit … priyankaramahaga … kaluwamodarakv … lakwelholdings … epidgovl … colperlk … sirimayura … gnetuniversals … systemte … dandagam … ceylonplantation … vtradelanka … melanifinefood … lankaher … ksoftlk1 … anandaob … onurgovl … ahavafoundation … casavill … corewebm … kamechol … simpleengineerin … tfablk … seyawinc … visionsolutionsh … bostonlanka … weeratra … newmedla … trails … essenceceylontea … agronatureholdin … … Done Nothing to do (/etc/suphp.conf does not exist) Processing ea-php72 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Processing ea-php73 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Processing ea-php74 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Processing ea-php80 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Processing ea-php81 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Processing ea-php82 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Processing ea-php83 … … moving zend_extension and extension directives from php.ini to php.d/zzzzzzz-pecl.ini … Service Status Found 6 versions of PHP-FPM: 82 72 74 81 83 73 Apache PHP-FPM 82(php-fpm: master process (/opt/cpanel/ea-php82/root/etc/php-fpm.conf)) is running as root with PID “1789646” (process table check method) Apache PHP-FPM 72(php-fpm: master process (/opt/cpanel/ea-php72/root/etc/php-fpm.conf)) is running as root with PID “1789658” (process table check method) Apache PHP-FPM 74(php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)) is running as root with PID “1789668” (process table check method) Apache PHP-FPM 81(php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)) is running as root with PID “1789673” (process table check method) Apache PHP-FPM 83(php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf)) is running as root with PID “1789679” (process table check method) Apache PHP-FPM 73(php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)) is running as root with PID “1789684” (process table check method) apache_php_fpm restarted successfully. Upgraded: alt-curlssl11-8.13.0-1.el8.x86_64 alt-freetds11-1.4.26-1.el8.x86_64 alt-libwebp-1.5.0-1.el8.x86_64 alt-libxml2-2.10.2-5.el8.x86_64 alt-libzip-1.10.1-2.el8.x86_64 alt-openssl-libs-1:1.0.2u-1.el8.x86_64 alt-pcre2-10.34-1.el8.x86_64 apr-1:1.6.3-12.el8.cloudlinux.x86_64 ea-brotli-1:1.0.9-2.el8.cloudlinux.x86_64 ea-libmcrypt-1:2.5.8-5.el8.cloudlinux.2.x86_64 ea-nghttp2-1:1.65.0-1.el8.cloudlinux.x86_64 ea-php72-1:7.2.34-2.el8.cloudlinux.2.x86_64 ea-php72-php-bcmath-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-calendar-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-curl-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-exif-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-fileinfo-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-gd-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-iconv-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-imap-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-intl-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-ioncube10-1:10.4.5-2.el8.cloudlinux.x86_64 ea-php72-php-mbstring-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-mysqlnd-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-opcache-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-soap-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-sockets-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-xmlrpc-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php72-php-zip-1:7.2.34-9.el8.cloudlinux.7.x86_64 ea-php73-1:7.3.33-1.el8.cloudlinux.2.x86_64 ea-php73-php-bcmath-1:7.3.33-13.el8.cloudlinux.4.x86_64 ea-php73-php-calendar-1:7.3.33-13.el8.cloudlinux.4.x86_64 ea-php73-php-curl-1:7.3.33-13.el8.cloudlinux.4.x86_64 ea-php73-php-exif-1:7.3.33-13.el8.cloudlinux.4.x86_64 ea-php73-php-fileinfo-1:7.3.33-13.el8.cloudlinux.4.x86_64 kernel-headers-1:4.18.0-553.50.1.lve.el8.x86_64 kmod-libs-2:25-20.el8.cloudlinux.1.x86_64 python3-perf-1:4.18.0-553.50.1.lve.el8.x86_64 python3-rhnlib-2.8.6-8.module_el8.10.0+6858+3ddf2832.noarch rhnsd-5.0.35-3.module_el8.10.0+6858+3ddf2832.x86_64 Complete! Syncing boot stack packages: shim* fwupd* fwupdate* grub2* with CL repositories. This is needed, otherwise Secure Boot is not working This system is receiving updates from CloudLinux Network server. CloudLinux Server 8 x86_64 8.8 kB/s | 4.2 kB 00:00 Dependencies resolved. Nothing to do. Complete! Syncing kernel packages with CL repositories This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:00:04 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Removing dependent packages: kernel-tools x86_64 4.18.0-553.54.1.el8_10 @baseos 704 k kernel-tools-libs x86_64 4.18.0-553.54.1.el8_10 @baseos 23 k Transaction Summary ================================================================================ Remove 2 Packages Freed space: 727 k Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: kernel-tools-4.18.0-553.54.1.el8_10.x86_64 1/1 Running scriptlet: kernel-tools-4.18.0-553.54.1.el8_10.x86_64 1/2 Erasing : kernel-tools-4.18.0-553.54.1.el8_10.x86_64 1/2 Running scriptlet: kernel-tools-4.18.0-553.54.1.el8_10.x86_64 1/2 Erasing : kernel-tools-libs-4.18.0-553.54.1.el8_10.x86_64 2/2 Running scriptlet: kernel-tools-libs-4.18.0-553.54.1.el8_10.x86_64 2/2 Verifying : kernel-tools-4.18.0-553.54.1.el8_10.x86_64 1/2 Verifying : kernel-tools-libs-4.18.0-553.54.1.el8_10.x86_64 2/2 Removed: kernel-tools-4.18.0-553.54.1.el8_10.x86_64 kernel-tools-libs-4.18.0-553.54.1.el8_10.x86_64 Complete! Installing lve... This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:00:10 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Package kernel-core-4.18.0-553.54.1.el8_10.x86_64 is already installed. Package kernel-core-1:4.18.0-553.50.1.lve.el8.x86_64 is already installed. Package kernel-core-4.18.0-553.51.1.el8_10.x86_64 is already installed. Package kernel-core-4.18.0-553.36.1.el8_10.x86_64 is already installed. Package cloudlinux-release-8.10-7.el8.x86_64 is already installed. Package kmod-lve-1:2.1-44.el8.x86_64 is already installed. Dependencies resolved. ========================================================================================================================== Package Arch Version Repository Size ========================================================================================================================== Installing: liblve-devel x86_64 2.1-21.el8.cloudlinux cloudlinux-x86_64-server-8 30 k lve x86_64 2.1-21.el8.cloudlinux cloudlinux-x86_64-server-8 74 k lve-stats x86_64 4.2.11-1.el8 cloudlinux-x86_64-server-8 601 k lve-utils x86_64 6.6.17-1.el8.cloudlinux cloudlinux-x86_64-server-8 730 k pam_lve x86_64 0.4-3.el8.cloudlinux cloudlinux-x86_64-server-8 25 k Installing dependencies: alt-ImageMagick x86_64 7.1.1-43.1.el8 cloudlinux-x86_64-server-8 20 M alt-ImageMagick-config x86_64 7.1.1-43.1.el8 cloudlinux-x86_64-server-8 42 k alt-ImageMagick-libs x86_64 7.1.1-43.1.el8 cloudlinux-x86_64-server-8 5.2 M alt-pylve x86_64 2.1-21.el8.cloudlinux cloudlinux-x86_64-server-8 33 k alt-python27-cllib x86_64 3.4.27-1.el8.cloudlinux cloudlinux-x86_64-server-8 480 k cloudlinux-venv x86_64 1.0.8-1.el8.cloudlinux cloudlinux-x86_64-server-8 53 M fftw-libs-double x86_64 3.3.5-11.el8 1.mirror.g.cdn.mycache.org_cloudlinux_8_BaseOS_x86_64_os_ 992 k freeglut x86_64 3.0.0-9.el8 1.mirror.g.cdn.mycache.org_cloudlinux_8_BaseOS_x86_64_os_ 190 k liblve x86_64 2.1-21.el8.cloudlinux cloudlinux-x86_64-server-8 83 k lve-wrappers x86_64 0.7.11-1.el8.cloudlinux cloudlinux-x86_64-server-8 46 k x265 x86_64 3.1.2-1.el8 cloudlinux-x86_64-server-8 49 k x265-libs x86_64 3.1.2-1.el8 cloudlinux-x86_64-server-8 1.9 M Transaction Summary ========================================================================================================================== Install 17 Packages Total download size: 83 M Installed size: 302 M Downloading Packages: (1/17): alt-ImageMagick-config-7.1.1-43.1.el8.x 69 kB/s | 42 kB 00:00 (2/17): alt-pylve-2.1-21.el8.cloudlinux.x86_64. 158 kB/s | 33 kB 00:00 (3/17): alt-python27-cllib-3.4.27-1.el8.cloudli 687 kB/s | 480 kB 00:00 (4/17): alt-ImageMagick-libs-7.1.1-43.1.el8.x86 1.4 MB/s | 5.2 MB 00:03 (5/17): liblve-2.1-21.el8.cloudlinux.x86_64.rpm 416 kB/s | 83 kB 00:00 (6/17): liblve-devel-2.1-21.el8.cloudlinux.x86_ 165 kB/s | 30 kB 00:00 (7/17): lve-2.1-21.el8.cloudlinux.x86_64.rpm 371 kB/s | 74 kB 00:00 (8/17): lve-stats-4.2.11-1.el8.x86_64.rpm 1.3 MB/s | 601 kB 00:00 (9/17): lve-utils-6.6.17-1.el8.cloudlinux.x86_6 1.2 MB/s | 730 kB 00:00 (10/17): lve-wrappers-0.7.11-1.el8.cloudlinux.x 240 kB/s | 46 kB 00:00 (11/17): pam_lve-0.4-3.el8.cloudlinux.x86_64.rp 136 kB/s | 25 kB 00:00 (12/17): x265-3.1.2-1.el8.x86_64.rpm 265 kB/s | 49 kB 00:00 (13/17): x265-libs-3.1.2-1.el8.x86_64.rpm 1.5 MB/s | 1.9 MB 00:01 (14/17): fftw-libs-double-3.3.5-11.el8.x86_64.r 575 kB/s | 992 kB 00:01 (15/17): freeglut-3.0.0-9.el8.x86_64.rpm 879 kB/s | 190 kB 00:00 (16/17): alt-ImageMagick-7.1.1-43.1.el8.x86_64. 1.1 MB/s | 20 MB 00:18 (17/17): cloudlinux-venv-1.0.8-1.el8.cloudlinux 1.8 MB/s | 53 MB 00:29 -------------------------------------------------------------------------------- Total 2.7 MB/s | 83 MB 00:30 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Running scriptlet: alt-python27-cllib-3.4.27-1.el8.cloudlinux.x86_64 1/1 Preparing : 1/1 Installing : cloudlinux-venv-1.0.8-1.el8.cloudlinux.x86_64 1/17 Installing : x265-libs-3.1.2-1.el8.x86_64 2/17 Running scriptlet: lve-2.1-21.el8.cloudlinux.x86_64 3/17 Installing : lve-2.1-21.el8.cloudlinux.x86_64 3/17 Running scriptlet: lve-2.1-21.el8.cloudlinux.x86_64 3/17 Installing : liblve-2.1-21.el8.cloudlinux.x86_64 4/17 Running scriptlet: liblve-2.1-21.el8.cloudlinux.x86_64 4/17 Installing : alt-python27-cllib-3.4.27-1.el8.cloudlinux.x86_64 5/17 Running scriptlet: alt-python27-cllib-3.4.27-1.el8.cloudlinux.x86_64 5/17 Installing : fftw-libs-double-3.3.5-11.el8.x86_64 6/17 Installing : alt-pylve-2.1-21.el8.cloudlinux.x86_64 7/17 Installing : lve-wrappers-0.7.11-1.el8.cloudlinux.x86_64 8/17 Installing : lve-utils-6.6.17-1.el8.cloudlinux.x86_64 9/17 warning: /etc/sysctl.d/90-cloudlinux.conf created as /etc/sysctl.d/90-cloudlinux.conf.rpmnew Running scriptlet: lve-utils-6.6.17-1.el8.cloudlinux.x86_64 9/17 INFO: Checking fs.proc_super_gid group... INFO: clsupergid group absent, creating ... INFO: clsupergid group created, gid is 1094 INFO: adding user 'polkitd' to group(s) ['clsupergid'] INFO: Checking fs.proc_super_gid group... INFO: clsupergid group absent, creating ... INFO: clsupergid group created, gid is 1094 Installing : x265-3.1.2-1.el8.x86_64 10/17 Installing : freeglut-3.0.0-9.el8.x86_64 11/17 Running scriptlet: freeglut-3.0.0-9.el8.x86_64 11/17 Installing : alt-ImageMagick-config-7.1.1-43.1.el8.x86_64 12/17 Installing : alt-ImageMagick-libs-7.1.1-43.1.el8.x86_64 13/17 Installing : alt-ImageMagick-7.1.1-43.1.el8.x86_64 14/17 Running scriptlet: lve-stats-4.2.11-1.el8.x86_64 15/17 Installing : lve-stats-4.2.11-1.el8.x86_64 15/17 Running scriptlet: lve-stats-4.2.11-1.el8.x86_64 15/17 INFO : (create_db) Configuring connection to db INFO : (init_db_engine) Connecting to database: sqlite INFO : (create_db) Creating tables Installing : liblve-devel-2.1-21.el8.cloudlinux.x86_64 16/17 Installing : pam_lve-0.4-3.el8.cloudlinux.x86_64 17/17 Running scriptlet: pam_lve-0.4-3.el8.cloudlinux.x86_64 17/17 Running scriptlet: lve-2.1-21.el8.cloudlinux.x86_64 17/17 Running scriptlet: liblve-2.1-21.el8.cloudlinux.x86_64 17/17 Running scriptlet: alt-python27-cllib-3.4.27-1.el8.cloudlinux.x86_64 17/17 Running scriptlet: lve-utils-6.6.17-1.el8.cloudlinux.x86_64 17/17 Should be run only with the plesk panel Running scriptlet: lve-stats-4.2.11-1.el8.x86_64 17/17 Created symlink /etc/systemd/system/multi-user.target.wants/lvestats.service → /usr/lib/systemd/system/lvestats.service. Running scriptlet: pam_lve-0.4-3.el8.cloudlinux.x86_64 17/17 Verifying : alt-ImageMagick-7.1.1-43.1.el8.x86_64 1/17 Verifying : alt-ImageMagick-config-7.1.1-43.1.el8.x86_64 2/17 Verifying : alt-ImageMagick-libs-7.1.1-43.1.el8.x86_64 3/17 Verifying : alt-pylve-2.1-21.el8.cloudlinux.x86_64 4/17 Verifying : alt-python27-cllib-3.4.27-1.el8.cloudlinux.x86_64 5/17 Verifying : cloudlinux-venv-1.0.8-1.el8.cloudlinux.x86_64 6/17 Verifying : liblve-2.1-21.el8.cloudlinux.x86_64 7/17 Verifying : liblve-devel-2.1-21.el8.cloudlinux.x86_64 8/17 Verifying : lve-2.1-21.el8.cloudlinux.x86_64 9/17 Verifying : lve-stats-4.2.11-1.el8.x86_64 10/17 Verifying : lve-utils-6.6.17-1.el8.cloudlinux.x86_64 11/17 Verifying : lve-wrappers-0.7.11-1.el8.cloudlinux.x86_64 12/17 Verifying : pam_lve-0.4-3.el8.cloudlinux.x86_64 13/17 Verifying : x265-3.1.2-1.el8.x86_64 14/17 Verifying : x265-libs-3.1.2-1.el8.x86_64 15/17 Verifying : fftw-libs-double-3.3.5-11.el8.x86_64 16/17 Verifying : freeglut-3.0.0-9.el8.x86_64 17/17 Installed: alt-ImageMagick-7.1.1-43.1.el8.x86_64 alt-ImageMagick-config-7.1.1-43.1.el8.x86_64 alt-ImageMagick-libs-7.1.1-43.1.el8.x86_64 alt-pylve-2.1-21.el8.cloudlinux.x86_64 alt-python27-cllib-3.4.27-1.el8.cloudlinux.x86_64 cloudlinux-venv-1.0.8-1.el8.cloudlinux.x86_64 fftw-libs-double-3.3.5-11.el8.x86_64 freeglut-3.0.0-9.el8.x86_64 liblve-2.1-21.el8.cloudlinux.x86_64 liblve-devel-2.1-21.el8.cloudlinux.x86_64 lve-2.1-21.el8.cloudlinux.x86_64 lve-stats-4.2.11-1.el8.x86_64 lve-utils-6.6.17-1.el8.cloudlinux.x86_64 lve-wrappers-0.7.11-1.el8.cloudlinux.x86_64 pam_lve-0.4-3.el8.cloudlinux.x86_64 x265-3.1.2-1.el8.x86_64 x265-libs-3.1.2-1.el8.x86_64 Complete! pretrans execution begin bundled_hooks_ver_path /usr/share/cloudlinux/hooks/.ver bundled_hooks_ver 4 remove_hooks_cmd /opt/alt/python27/lib/python2.7/site-packages/clcommon/public_hooks/bundle/hooks.py remove file DOES NOT exist: /usr/share/cloudlinux/hooks/.ver creating directory /usr creating directory /usr/share creating directory /usr/share/cloudlinux creating directory /usr/share/cloudlinux/hooks writing new hooks version to /usr/share/cloudlinux/hooks/.ver pretrans execution end This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:01:17 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. ============================================================================================ Package Arch Version Repository Size ============================================================================================ Installing: lvemanager noarch 7.11.22-1.el8.cloudlinux cloudlinux-x86_64-server-8 4.5 M Installing dependencies: alt-php-ssa x86_64 0.4-15.el8 cloudlinux-x86_64-server-8 86 k cl-web-monitoring-tool x86_64 3.1.5-1.el8.cloudlinux cloudlinux-x86_64-server-8 108 k glibc-langpack-en x86_64 2.28-251.el8_10.16 baseos 831 k Transaction Summary ============================================================================================ Install 4 Packages Total download size: 5.5 M Installed size: 26 M Downloading Packages: (1/4): alt-php-ssa-0.4-15.el8.x86_64.rpm 120 kB/s | 86 kB 00:00 (2/4): cl-web-monitoring-tool-3.1.5-1.el8.cloud 92 kB/s | 108 kB 00:01 (3/4): glibc-langpack-en-2.28-251.el8_10.16.x86 1.2 MB/s | 831 kB 00:00 (4/4): lvemanager-7.11.22-1.el8.cloudlinux.noar 435 kB/s | 4.5 MB 00:10 -------------------------------------------------------------------------------- Total 519 kB/s | 5.5 MB 00:10 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Installing : glibc-langpack-en-2.28-251.el8_10.16.x86_64 1/4 Installing : cl-web-monitoring-tool-3.1.5-1.el8.cloudlinux.x86_64 2/4 Running scriptlet: cl-web-monitoring-tool-3.1.5-1.el8.cloudlinux.x86_64 2/4 Redirecting to /bin/systemctl try-restart cl_wmt_scanner.service Installing : alt-php-ssa-0.4-15.el8.x86_64 3/4 Running scriptlet: alt-php-ssa-0.4-15.el8.x86_64 3/4 Running scriptlet: lvemanager-7.11.22-1.el8.cloudlinux.noarch 4/4 Installing : lvemanager-7.11.22-1.el8.cloudlinux.noarch 4/4 Running scriptlet: lvemanager-7.11.22-1.el8.cloudlinux.noarch 4/4 Starting update script... Gathering file list for /opt/cloudlinux/flags/available-flags.d/ Building directory tree and copying files Copy/update files... Migrating cPanel UI configs to new UI config file... Gathering file list for /usr/share/l.v.e-manager/cpanel/spa/assets/static/ Building directory tree and copying files Copy/update files... Gathering file list for /usr/local/cpanel/whostmgr/docroot/images/ Building directory tree and copying files made directory /usr/local/cpanel/whostmgr/docroot/images/spa made directory /usr/local/cpanel/whostmgr/docroot/images/lve Copy/update files... '/usr/share/l.v.e-manager/cpanel/images/Cloudlinux_icon.png' -> '/usr/local/cpanel/whostmgr/docroot/addon_plugins/Cloudlinux_icon.png' lvemanager registered Waiting for “cpsrvd” to restart gracefully …………waiting for “cpsrvd” to initialize ………finished. Service Status cpanel (/usr/local/cpanel/cpsrvd --llu=1749251724 --listen=3,4,5,6,7,8,9,10,11,12 --accepted=14 --systemd) is running as root with PID 1699842 (systemd+/proc check method). Startup Log Jun 07 11:30:59 host2.phenomhost.com sudo[1783278]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=agentallianz LangPHP php_get_vhost_versions --output=json' Jun 07 11:31:00 host2.phenomhost.com sudo[1783291]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bostonlanka ; COMMAND=/bin/sh -c 'cd /home/bostonlanka/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' Jun 07 11:31:00 host2.phenomhost.com sudo[1783307]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=bostonlanka LangPHP php_get_vhost_versions --output=json' Jun 07 11:31:00 host2.phenomhost.com sudo[1783330]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=hspices ; COMMAND=/bin/sh -c 'cd /home/hspices/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' Jun 07 11:31:00 host2.phenomhost.com sudo[1783346]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=hspices LangPHP php_get_vhost_versions --output=json' Jun 07 11:31:01 host2.phenomhost.com sudo[1783358]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=anandaob ; COMMAND=/bin/sh -c 'cd /home/anandaob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' Jun 07 11:31:01 host2.phenomhost.com sudo[1783374]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=anandaob LangPHP php_get_vhost_versions --output=json' Jun 07 11:31:01 host2.phenomhost.com sudo[1783424]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=anandaob ; COMMAND=/bin/sh -c 'cd /home/anandaob/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' Jun 07 11:31:01 host2.phenomhost.com sudo[1783429]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=ajsstarlog ; COMMAND=/bin/sh -c 'cd /home/ajsstarlog/public_html && /usr/local/bin/php -d display_errors=0 -r \'echo defined(PHP_MAJOR_VERSION) ? PHP_MAJOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_MINOR_VERSION . \'"\'"\'.\'"\'"\' . PHP_RELEASE_VERSION : PHP_VERSION;\' 2> /dev/null' Jun 07 11:31:02 host2.phenomhost.com sudo[1783445]: wp-toolkit : PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c 'uapi --user=ajsstarlog LangPHP php_get_vhost_versions --output=json' cpsrvd restarted successfully. Gathering file list for /usr/local/cpanel/whostmgr/docroot/3rdparty/cloudlinux/assets Building directory tree and copying files made directory /usr/local/cpanel/whostmgr/docroot/3rdparty/cloudlinux/assets/images made directory /usr/local/cpanel/whostmgr/docroot/3rdparty/cloudlinux/assets/fonts Copy/update files... Finished update script... Rebuilding cPanel global cache... Building global cache for cpanel...Done Running scriptlet: alt-php-ssa-0.4-15.el8.x86_64 4/4 Running scriptlet: lvemanager-7.11.22-1.el8.cloudlinux.noarch 4/4 Verifying : alt-php-ssa-0.4-15.el8.x86_64 1/4 Verifying : cl-web-monitoring-tool-3.1.5-1.el8.cloudlinux.x86_64 2/4 Verifying : lvemanager-7.11.22-1.el8.cloudlinux.noarch 3/4 Verifying : glibc-langpack-en-2.28-251.el8_10.16.x86_64 4/4Run cloudlinux-summary for collecting data. Nothing to do (/etc/suphp.conf does not exist) Installed: alt-php-ssa-0.4-15.el8.x86_64 cl-web-monitoring-tool-3.1.5-1.el8.cloudlinux.x86_64 glibc-langpack-en-2.28-251.el8_10.16.x86_64 lvemanager-7.11.22-1.el8.cloudlinux.noarch Complete! This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:06 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. Nothing to do. Complete! --2025-06-07 11:44:20-- https://1.mirror.g.cdn.mycache.org/cloudlinux/sources/cloudlinux_ea3_to_ea4 Resolving 1.mirror.g.cdn.mycache.org (1.mirror.g.cdn.mycache.org)... 89.34.230.207, 89.34.230.190, 78.129.208.76 Connecting to 1.mirror.g.cdn.mycache.org (1.mirror.g.cdn.mycache.org)|89.34.230.207|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 26432 (26K) [text/plain] Saving to: ‘cloudlinux_ea3_to_ea4’ 0K .......... .......... ..... 100% 2.96M=0.009s 2025-06-07 11:44:21 (2.96 MB/s) - ‘cloudlinux_ea3_to_ea4’ saved [26432/26432] Running version: 2.13 package cagefs is not installed Enabling of EA4 repository for CloudLinux This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:11 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Package yum-utils-4.0.21-25.el8.noarch is already installed. Dependencies resolved. Nothing to do. Complete! This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:18 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. Nothing to do. Complete! lvemanager-7.11.22-1.el8.cloudlinux.noarch This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:22 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. Nothing to do. Complete! Checking if mod_lsapi or alt_mod_passenger are installed. There are conflicts with mod_lsapi and mod_passenger for EA4 This system is receiving updates from CloudLinux Network server. No match for argument: alt-mod-passenger No match for argument: mod_lsapi No packages marked for removal. Dependencies resolved. Nothing to do. Complete! Begin converting to EA4 ea-profiles-cpanel-1.0-71.73.1.cpanel.x86_64 This system is receiving updates from CloudLinux Network server. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Removing: ea-profiles-cpanel x86_64 5:1.0-71.73.1.cpanel @EA4-c8 30 k Transaction Summary ================================================================================ Remove 1 Package Freed space: 30 k Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. usermod: no changes Running transaction Preparing : 1/1 Running scriptlet: ea-profiles-cpanel-5:1.0-71.73.1.cpanel.x86_64 1/1 Removing active cpanel profiles directory. Erasing : ea-profiles-cpanel-5:1.0-71.73.1.cpanel.x86_64 1/1 Verifying : ea-profiles-cpanel-5:1.0-71.73.1.cpanel.x86_64 1/1usermod: no changes Purging all relevant cached command results Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-V Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-l Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-v Rebuilding global cache Building global cache for cpanel...Done Nothing to do (/etc/suphp.conf does not exist) Built /etc/apache2/conf/httpd.conf OK Nothing to do under ea4 (this script has been deprecated under ea4). Fix mailman package directories … … PID 1791900 Fix mailing list perms … … PID 1791902 Aligning modsec config to Whostmgr - Whostmgr version 11.126.0.19 - Whostmgr supports conf.d/modsec location - No change necessary Waiting for “httpd” to restart gracefully …waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 1773555 (systemd+/proc check method). Startup Log Jun 07 11:00:30 host2.phenomhost.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... Jun 07 11:00:31 host2.phenomhost.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory Jun 07 11:00:31 host2.phenomhost.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Sat Jun 07 11:42:05.365602 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:31:06.471442 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:30:33.447461 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.812003 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.445040 2025] [security2:notice] [pid 1773541:tid 1773541] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 10:45:29.234751 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:29.225748 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:20.027736 2025] [security2:--**warning**--] [pid 1727663:tid 1727663] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK6BxNfM0Tz8Vs-NoF9wAAAAE"] [Sat Jun 07 10:45:11.990794 2025] [security2:--**warning**--] [pid 1727975:tid 1727975] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK33Km65MOZNaRZCOVyQAAAAo"] [Sat Jun 07 10:45:10.188552 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] [Sat Jun 07 10:45:10.187726 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] httpd restarted successfully. Setting /home permissions to 0711 … Setting permissions for users … leprosycampaignh … trails … monarchdss … asrgroup … kiriaswa … priyankaramahaga … neotech … lankaher … dandagam … corewebm … danishlk … epidgovl … agronatureholdin … cloudtourssrilan … melanifinefood … maximsholdings … simpleengineerin … ambitionglobalfi … webitran … nirmalsa … saara … vdeploy … euroentertainmen … seyawinc … lakwelholdings … centralc … buildbywebitra … systemte … ajsstarlog … weeratra … sunriselanka … bostonlanka … radixlk … kadumbin … royalgua … hspices … ksoftweb … agentallianz … tradeceylon … lkdeacom … linayast … secondco … ayuzonelanka … newlezzarotech … ceylondigest … sadaroex … newlmdha … idealist … ahavafoundation … aathitea … tfablk … kamechol … vtradelanka … happypuppyvet … casavill … sirimayura … bbicecreams … sysnytech … nsteeleng … nccphealthgov … newmedla … nsclatex … colourmarklabels … dragon … colperlab … asllogistics … simpurit … buddhika … fhbhealt … sivagnanamfounda … kamechot … myproteinbox … kaluwamodarakv … onurgovl … ceylonplantation … gnetuniversals … askinternational … jrdclk … rockstic … topviewl … yummykin … gaminispring … gemtrails … smartenglish … essenceceylontea … colperlk … visionsolutionsh … jayameta … dataesit … ksoftlk1 … anandaob … partsfinder … … Done Removed: ea-profiles-cpanel-5:1.0-71.73.1.cpanel.x86_64 Complete! This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:35 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Installing: ea-profiles-cloudlinux x86_64 4:1.0-71.2.el8 cl-ea4 28 k Transaction Summary ================================================================================ Install 1 Package Total download size: 28 k Installed size: 296 k Downloading Packages: ea-profiles-cloudlinux-1.0-71.2.el8.x86_64.rpm 47 kB/s | 28 kB 00:00 -------------------------------------------------------------------------------- Total 47 kB/s | 28 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. usermod: no changes Running transaction Preparing : 1/1 Installing : ea-profiles-cloudlinux-4:1.0-71.2.el8.x86_64 1/1 Running scriptlet: ea-profiles-cloudlinux-4:1.0-71.2.el8.x86_64 1/1 Doing standard EA4 profiles. Verifying : ea-profiles-cloudlinux-4:1.0-71.2.el8.x86_64 1/1usermod: no changes Purging all relevant cached command results Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-V Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-l Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-v Rebuilding global cache Building global cache for cpanel...Done Nothing to do (/etc/suphp.conf does not exist) Built /etc/apache2/conf/httpd.conf OK Nothing to do under ea4 (this script has been deprecated under ea4). Fix mailman package directories … … PID 1792004 Fix mailing list perms … … PID 1792006 Aligning modsec config to Whostmgr - Whostmgr version 11.126.0.19 - Whostmgr supports conf.d/modsec location - No change necessary Waiting for “httpd” to restart gracefully …waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 1773555 (systemd+/proc check method). Startup Log Jun 07 11:00:30 host2.phenomhost.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... Jun 07 11:00:31 host2.phenomhost.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory Jun 07 11:00:31 host2.phenomhost.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Sat Jun 07 11:44:45.016329 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:42:05.365602 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:31:06.471442 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:30:33.447461 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.812003 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.445040 2025] [security2:notice] [pid 1773541:tid 1773541] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 10:45:29.234751 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:29.225748 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:20.027736 2025] [security2:--**warning**--] [pid 1727663:tid 1727663] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK6BxNfM0Tz8Vs-NoF9wAAAAE"] [Sat Jun 07 10:45:11.990794 2025] [security2:--**warning**--] [pid 1727975:tid 1727975] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK33Km65MOZNaRZCOVyQAAAAo"] [Sat Jun 07 10:45:10.188552 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] [Sat Jun 07 10:45:10.187726 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] httpd restarted successfully. Setting /home permissions to 0711 … Setting permissions for users … kiriaswa … radixlk … webitran … nccphealthgov … lakwelholdings … bbicecreams … visionsolutionsh … kadumbin … jrdclk … ambitionglobalfi … asllogistics … happypuppyvet … ajsstarlog … centralc … topviewl … colperlk … sadaroex … ayuzonelanka … vtradelanka … jayameta … smartenglish … monarchdss … melanifinefood … aathitea … nsclatex … kaluwamodarakv … agronatureholdin … maximsholdings … royalgua … buddhika … corewebm … colourmarklabels … cloudtourssrilan … buildbywebitra … lkdeacom … vdeploy … linayast … yummykin … euroentertainmen … sirimayura … weeratra … newlezzarotech … neotech … essenceceylontea … priyankaramahaga … agentallianz … bostonlanka … trails … danishlk … gaminispring … ceylonplantation … sivagnanamfounda … myproteinbox … nsteeleng … simpurit … sysnytech … lankaher … tfablk … newmedla … newlmdha … tradeceylon … dragon … dataesit … hspices … secondco … ksoftweb … seyawinc … fhbhealt … partsfinder … leprosycampaignh … epidgovl … onurgovl … ceylondigest … idealist … kamechot … gemtrails … nirmalsa … askinternational … saara … sunriselanka … colperlab … rockstic … ksoftlk1 … ahavafoundation … systemte … casavill … asrgroup … dandagam … gnetuniversals … simpleengineerin … kamechol … anandaob … … Done Installed: ea-profiles-cloudlinux-4:1.0-71.2.el8.x86_64 Complete! This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:44 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. Nothing to do. Complete! Begin Installation of mod_hostinglimits This system is receiving updates from CloudLinux Network server. Last metadata expiration check: 0:02:47 ago on Sat 07 Jun 2025 11:42:12 AM +0530. Dependencies resolved. ================================================================================ Package Arch Version Repo Size ================================================================================ Installing: ea-apache24-mod_hostinglimits x86_64 1.0-40.el8.cloudlinux cl-ea4 38 k Transaction Summary ================================================================================ Install 1 Package Total download size: 38 k Installed size: 50 k Downloading Packages: ea-apache24-mod_hostinglimits-1.0-40.el8.cloudl 50 kB/s | 38 kB 00:00 -------------------------------------------------------------------------------- Total 49 kB/s | 38 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. usermod: no changes Running transaction Preparing : 1/1 Installing : ea-apache24-mod_hostinglimits-1.0-40.el8.cloudlinux. 1/1 Running scriptlet: ea-apache24-mod_hostinglimits-1.0-40.el8.cloudlinux. 1/1 Verifying : ea-apache24-mod_hostinglimits-1.0-40.el8.cloudlinux. 1/1usermod: no changes Purging all relevant cached command results Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-V Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-l Removing: /root/.cpanel/datastore/_usr_sbin_httpd_-v Rebuilding global cache Building global cache for cpanel...Done Nothing to do (/etc/suphp.conf does not exist) Built /etc/apache2/conf/httpd.conf OK Nothing to do under ea4 (this script has been deprecated under ea4). Fix mailman package directories … … PID 1792262 Fix mailing list perms … … PID 1792264 Aligning modsec config to Whostmgr - Whostmgr version 11.126.0.19 - Whostmgr supports conf.d/modsec location - No change necessary Waiting for “httpd” to stop ………finished. Startup Log Jun 07 11:00:30 host2.phenomhost.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... Jun 07 11:00:31 host2.phenomhost.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory Jun 07 11:00:31 host2.phenomhost.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Jun 07 11:45:07 host2.phenomhost.com systemd[1]: Stopping Apache web server managed by cPanel EasyApache... Jun 07 11:45:07 host2.phenomhost.com systemd[1]: httpd.service: Succeeded. Jun 07 11:45:07 host2.phenomhost.com systemd[1]: Stopped Apache web server managed by cPanel EasyApache. Log Messages Jun 7 11:45:07 host2 systemd[1]: Stopped Apache web server managed by cPanel EasyApache. Jun 7 11:45:07 host2 systemd[1]: Stopping Apache web server managed by cPanel EasyApache... [Sat Jun 07 11:44:53.913523 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:44:45.016329 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:42:05.365602 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:31:06.471442 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:30:33.447461 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.812003 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.445040 2025] [security2:notice] [pid 1773541:tid 1773541] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 10:45:29.234751 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:29.225748 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:20.027736 2025] [security2:--**warning**--] [pid 1727663:tid 1727663] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK6BxNfM0Tz8Vs-NoF9wAAAAE"] [Sat Jun 07 10:45:11.990794 2025] [security2:--**warning**--] [pid 1727975:tid 1727975] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK33Km65MOZNaRZCOVyQAAAAo"] [Sat Jun 07 10:45:10.188552 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] [Sat Jun 07 10:45:10.187726 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] httpd stopped successfully. Waiting for “httpd” to start ……waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 1792311 (systemd+/proc check method). Startup Log Jun 07 11:45:07 host2.phenomhost.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... Jun 07 11:45:08 host2.phenomhost.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory Jun 07 11:45:08 host2.phenomhost.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Sat Jun 07 11:45:08.729419 2025] [mpm_prefork:notice] [pid 1792311:tid 1792311] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:45:08.347093 2025] [security2:notice] [pid 1792307:tid 1792307] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 11:44:53.913523 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:44:45.016329 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:42:05.365602 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:31:06.471442 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:30:33.447461 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.812003 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.445040 2025] [security2:notice] [pid 1773541:tid 1773541] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 10:45:29.234751 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:29.225748 2025] [security2:--**warning**--] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:20.027736 2025] [security2:--**warning**--] [pid 1727663:tid 1727663] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK6BxNfM0Tz8Vs-NoF9wAAAAE"] [Sat Jun 07 10:45:11.990794 2025] [security2:--**warning**--] [pid 1727975:tid 1727975] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK33Km65MOZNaRZCOVyQAAAAo"] [Sat Jun 07 10:45:10.188552 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] [Sat Jun 07 10:45:10.187726 2025] [security2:--**warning**--] [pid 1727702:tid 1727702] [client 216.244.66.237:0] [client 216.244.66.237] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.dragon.lk"] [uri "/storage/vendor/klarna/kco_rest/git_hooks/commit-msg/"] [unique_id "aEPK3vATLve4Qoj8R0rP9wAAAAk"] Jun 7 11:45:08 host2 systemd[1]: Started Apache web server managed by cPanel EasyApache. Jun 7 11:45:08 host2 systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory httpd started successfully. Setting /home permissions to 0711 … Setting permissions for users … buildbywebitra … myproteinbox … vdeploy … partsfinder … bbicecreams … simpleengineerin … tfablk … nsclatex … melanifinefood … lkdeacom … colperlab … agentallianz … sysnytech … maximsholdings … visionsolutionsh … kadumbin … nirmalsa … linayast … trails … buddhika … leprosycampaignh … seyawinc … neotech … centralc … askinternational … lakwelholdings … priyankaramahaga … kaluwamodarakv … royalgua … essenceceylontea … lankaher … kamechot … dragon … vtradelanka … corewebm … webitran … euroentertainmen … ksoftlk1 … jayameta … agronatureholdin … dataesit … ceylondigest … idealist … monarchdss … rockstic … simpurit … sivagnanamfounda … nsteeleng … dandagam … sirimayura … secondco … casavill … ayuzonelanka … cloudtourssrilan … smartenglish … asllogistics … newlezzarotech … ksoftweb … onurgovl … gnetuniversals … nccphealthgov … tradeceylon … ceylonplantation … danishlk … colourmarklabels … newlmdha … gemtrails … saara … gaminispring … kiriaswa … asrgroup … kamechol … jrdclk … yummykin … systemte … ajsstarlog … colperlk … anandaob … weeratra … sunriselanka … topviewl … sadaroex … newmedla … fhbhealt … ahavafoundation … aathitea … happypuppyvet … ambitionglobalfi … bostonlanka … epidgovl … hspices … radixlk … … Done Installed: ea-apache24-mod_hostinglimits-1.0-40.el8.cloudlinux.x86_64 Complete! Check for RUID and install suexec if needed Redirecting to /bin/systemctl restart httpd.service You are running mod_ruid2 that doesn't support Memory Limits, CageFS & PHPSelector. Do you want to switch to performance optimized mod_lsapi profile, and get all the benefits of CloudLinux If you want to switch to performance optimized profile, follow next commands: yum erase ea-apache24-mod_ruid2 yum install ea-apache24-mod_lsapi liblsapi liblsapi-devel ea-apache24-mod_suexec You can find complete log in /var/log/cloudlinux_ea3_to_ea4.dblog/cloudlinux_ea3_to_ea4.log.1749276861 Waiting for “httpd” to restart gracefully …waiting for “httpd” to initialize ………finished. Service Status httpd (/usr/sbin/httpd -k start) is running as root with PID 1798013 (systemd+/proc check method). Startup Log Jun 07 11:45:12 host2.phenomhost.com systemd[1]: Starting Apache web server managed by cPanel EasyApache... Jun 07 11:45:13 host2.phenomhost.com systemd[1]: httpd.service: Can't open PID file /run/apache2/httpd.pid (yet?) after start: No such file or directory Jun 07 11:45:13 host2.phenomhost.com systemd[1]: Started Apache web server managed by cPanel EasyApache. Log Messages [Sat Jun 07 11:45:13.429016 2025] [mpm_prefork:notice] [pid 1798013:tid 1798013] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:45:13.075931 2025] [security2:notice] [pid 1798009:tid 1798009] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 11:45:08.729419 2025] [mpm_prefork:notice] [pid 1792311:tid 1792311] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:45:08.347093 2025] [security2:notice] [pid 1792307:tid 1792307] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 11:44:53.913523 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:44:45.016329 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:42:05.365602 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:31:06.471442 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:30:33.447461 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.812003 2025] [mpm_prefork:notice] [pid 1773555:tid 1773555] AH00163: Apache/2.4.63 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 configured -- resuming normal operations [Sat Jun 07 11:00:31.445040 2025] [security2:notice] [pid 1773541:tid 1773541] ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured. [Sat Jun 07 10:45:29.234751 2025] [security2:error] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=5,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:29.225748 2025] [security2:error] [pid 1728017:tid 1728017] [client 141.95.53.61:0] [client 141.95.53.61] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ksoft.lk"] [uri "/xmlrpc.php"] [unique_id "aEPK8V0B3tmE9wkozpAaiAAAAAs"] [Sat Jun 07 10:45:20.027736 2025] [security2:error] [pid 1727663:tid 1727663] [client 91.219.239.4:0] [client 91.219.239.4] ModSecurity: Warning. Matched phrase "//cloud.cdndynamic.com" at ARGS:result[_msg]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/002_i360_basic.conf"] [line "20"] [id "77350630"] [msg "IM360 WAF: DB injection limit||ARG:ARGS:result[_msg]||Injection:||User:jrdclk||SC:/home/jrdclk/public_html/wp-json||WPU:||RSV:6.84||RS:0||T:APACHE||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "jrdc.lk"] [uri "/wp-json/litespeed/v1/cdn_status"] [unique_id "aEPK6BxNfM0Tz8Vs-NoF9wAAAAE"] httpd restarted successfully. WARNING! Please check validity of default grub record Parameters "initrd" and "linux" should point to those that are installed by CloudLinux, but found: "initrd"=/boot/initramfs-4.18.0-553.54.1.el8_10.x86_64.img "linux"=/boot/vmlinuz-4.18.0-553.54.1.el8_10.x86_64 PLEASE DO NOT REBOOT SERVER. See article https://cloudlinux.zendesk.com/hc/en-us/articles/360017630613 === DEBUG OUTPUT === WARN: --skip-kmod-check option was used. It's dangerous because it may hide critical compatibility problems. uname -r : 4.18.0-553.51.1.el8_10.x86_64 ls -la /boot : total 186588 dr-xr-xr-x. 5 root root 4096 Jun 4 17:41 . dr-xr-xr-x. 21 root root 4096 Jun 7 11:45 .. -rw-r--r-- 1 root root 202318 Jan 22 13:46 config-4.18.0-553.36.1.el8_10.x86_64 -rw-r--r-- 1 root root 202318 Apr 30 13:39 config-4.18.0-553.51.1.el8_10.x86_64 -rw-r--r-- 1 root root 202318 May 28 08:28 config-4.18.0-553.54.1.el8_10.x86_64 drwxr-xr-x. 3 root root 4096 Dec 13 2022 efi drwx------. 4 root root 4096 Apr 22 2024 grub2 -rw-------. 1 root root 53418892 Dec 13 2022 initramfs-0-rescue-94ec86214b6d4f709d03069668011c21.img -rw------- 1 root root 26786836 Mar 25 21:34 initramfs-4.18.0-553.36.1.el8_10.x86_64.img -rw------- 1 root root 26472642 May 7 11:16 initramfs-4.18.0-553.51.1.el8_10.x86_64.img -rw------- 1 root root 26780413 Jun 4 17:41 initramfs-4.18.0-553.54.1.el8_10.x86_64.img drwxr-xr-x. 3 root root 4096 Dec 13 2022 loader lrwxrwxrwx 1 root root 53 Feb 3 20:48 symvers-4.18.0-553.36.1.el8_10.x86_64.gz -> /lib/modules/4.18.0-553.36.1.el8_10.x86_64/symvers.gz lrwxrwxrwx 1 root root 53 May 7 11:16 symvers-4.18.0-553.51.1.el8_10.x86_64.gz -> /lib/modules/4.18.0-553.51.1.el8_10.x86_64/symvers.gz lrwxrwxrwx 1 root root 53 Jun 4 17:40 symvers-4.18.0-553.54.1.el8_10.x86_64.gz -> /lib/modules/4.18.0-553.54.1.el8_10.x86_64/symvers.gz -rw------- 1 root root 4509924 Jan 22 13:46 System.map-4.18.0-553.36.1.el8_10.x86_64 -rw------- 1 root root 4507711 Apr 30 13:39 System.map-4.18.0-553.51.1.el8_10.x86_64 -rw------- 1 root root 4507759 May 28 08:27 System.map-4.18.0-553.54.1.el8_10.x86_64 -rwxr-xr-x. 1 root root 10747552 Dec 13 2022 vmlinuz-0-rescue-94ec86214b6d4f709d03069668011c21 -rwxr-xr-x 1 root root 10891064 Jan 22 13:47 vmlinuz-4.18.0-553.36.1.el8_10.x86_64 -rw-r--r-- 1 root root 174 Jan 22 13:45 .vmlinuz-4.18.0-553.36.1.el8_10.x86_64.hmac -rwxr-xr-x 1 root root 10888040 Apr 30 13:39 vmlinuz-4.18.0-553.51.1.el8_10.x86_64 -rw-r--r-- 1 root root 174 Apr 30 13:39 .vmlinuz-4.18.0-553.51.1.el8_10.x86_64.hmac -rwxr-xr-x 1 root root 10883944 May 28 08:29 vmlinuz-4.18.0-553.54.1.el8_10.x86_64 -rw-r--r-- 1 root root 174 May 28 08:27 .vmlinuz-4.18.0-553.54.1.el8_10.x86_64.hmac ls -l /etc/grub2.cfg : lrwxrwxrwx. 1 root root 22 Apr 22 2024 /etc/grub2.cfg -> ../boot/grub2/grub.cfg === //DEBUG OUTPUT === [cloudlinux-customizer]: Initial provisioning during transition of CloudLinux OS Shared Pro into CloudLinux OS Shared Pro [cloudlinux-customizer]: You can find complete logs of the operation here: /var/log/cloudlinux/clcustomizer.log [cloudlinux-customizer]: Configuring environment for CloudLinux OS Shared PRO [cloudlinux-customizer]: Converting environment to CloudLinux OS Shared [cloudlinux-customizer]: Erasing package 'cloudlinux-solo-meta' [cloudlinux-customizer]: Checking package 'cloudlinux-solo-meta' state again... package is now in state 'uninstalled' [cloudlinux-customizer]: Erasing package 'cloudlinux-admin-meta' [cloudlinux-customizer]: Checking package 'cloudlinux-admin-meta' state again... package is now in state 'uninstalled' [cloudlinux-customizer]: (Re)installing package 'cloudlinux-linksafe' [cloudlinux-customizer]: Assigning linksafe group to files of 'alt-*' packages residing under /opt/alt [cloudlinux-customizer]: (Re)installing package 'lve-stats' [cloudlinux-customizer]: Changing service 'lve' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lve_namespaces' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lvestats' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lvectl' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lve' state to 'running' [cloudlinux-customizer]: Changing service 'lve_namespaces' state to 'running' [cloudlinux-customizer]: Changing service 'lvestats' state to 'running' [cloudlinux-customizer]: Changing service 'lvectl' state to 'running' [cloudlinux-customizer]: Changing service 'lve' state to 'enabled' [cloudlinux-customizer]: Changing service 'lve_namespaces' state to 'enabled' [cloudlinux-customizer]: Changing service 'lvestats' state to 'enabled' [cloudlinux-customizer]: Changing service 'lvectl' state to 'enabled' [cloudlinux-customizer]: Changing service 'lve' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lve_namespaces' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lvestats' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lvectl' state to 'unmasked' [cloudlinux-customizer]: Changing service 'lve' state to 'running' [cloudlinux-customizer]: Changing service 'lve_namespaces' state to 'running' [cloudlinux-customizer]: Changing service 'lvestats' state to 'running' [cloudlinux-customizer]: Changing service 'lvectl' state to 'running' [cloudlinux-customizer]: Changing service 'lve' state to 'enabled' [cloudlinux-customizer]: Changing service 'lve_namespaces' state to 'enabled' [cloudlinux-customizer]: Changing service 'lvestats' state to 'enabled' [cloudlinux-customizer]: Changing service 'lvectl' state to 'enabled' [cloudlinux-customizer]: (Re)installing package 'lve-utils' [cloudlinux-customizer]: (Re)installing package 'lvemanager' [cloudlinux-customizer]: Reconfiguration of Shared Pro exclusive features [cloudlinux-customizer]: Unable to reconfigure Shared Pro-only features. stdout: , stderr: [cloudlinux-customizer]: Enabling Accelerate WP [cloudlinux-customizer]: Turning off notifications and automatic WordPress plugin installation [cloudlinux-customizer]: Reconfiguration of Shared Pro exclusive features [cloudlinux-customizer]: Unable to reconfigure Shared Pro-only features. stdout: , stderr: [cloudlinux-customizer]: You can find complete logs of the operation here: /var/log/cloudlinux/clcustomizer.log This system is receiving updates from CloudLinux Network server. No match for argument: grub2-efi-x64 No packages marked for removal. Dependencies resolved. Nothing to do. Complete! /boot/grub2/grub.cfg found as grub config