@asmecher i found these two files for logs. Please check this because problem still there.
54.36.148.142 - - [31/Oct/2019:17:08:04 +0500] “GET /index.php/pjo/article/view/630 HTTP/1.1” 200 15800 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
54.36.149.66 - - [31/Oct/2019:17:11:09 +0500] “GET /index.php/pjo/article/view/534 HTTP/1.1” 200 14895 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
54.36.148.110 - - [31/Oct/2019:17:11:12 +0500] “GET /index.php/pjo/issue/view/34 HTTP/1.1” 200 17992 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
46.229.168.145 - - [31/Oct/2019:17:15:16 +0500] “GET /robots.txt HTTP/1.1” 200 32 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
46.229.168.146 - - [31/Oct/2019:17:15:18 +0500] “GET /index.php/pjo/article/view/135/109 HTTP/1.1” 200 3653 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
63.143.42.252 - - [31/Oct/2019:17:16:33 +0500] “GET / HTTP/1.1” 302 - “http://www.pjo.org.pk” “Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)”
63.143.42.252 - - [31/Oct/2019:17:16:35 +0500] “GET /index.php/pjo HTTP/1.1” 200 17279 “http://www.pjo.org.pk” “Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)”
46.229.168.161 - - [31/Oct/2019:17:18:43 +0500] “GET /index.php/pjo/article/download/671/558/ HTTP/1.1” 200 207473 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
54.36.148.45 - - [31/Oct/2019:17:20:28 +0500] “GET /index.php/pjo/article/download/388/331/ HTTP/1.1” 200 60502 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
46.229.168.145 - - [31/Oct/2019:17:23:10 +0500] “GET /index.php/pjo/article/download/73/52/ HTTP/1.1” 200 225347 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
46.229.168.150 - - [31/Oct/2019:17:25:24 +0500] “GET /index.php/pjo HTTP/1.1” 200 17108 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
54.36.150.165 - - [31/Oct/2019:17:30:05 +0500] “GET /index.php/pjo/article/view/618/519 HTTP/1.1” 200 3713 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
216.244.66.202 - - [31/Oct/2019:17:35:21 +0500] “GET /robots.txt HTTP/1.1” 200 32 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
54.36.150.33 - - [31/Oct/2019:17:45:52 +0500] “GET /index.php/pjo/article/download/294/250/ HTTP/1.1” 200 296221 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
46.229.168.133 - - [31/Oct/2019:17:46:20 +0500] “GET /robots.txt HTTP/1.1” 200 32 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
46.229.168.148 - - [31/Oct/2019:17:46:21 +0500] “GET /plugins/generic/pdfJsViewer/pdf.js/web/viewer.html?file=http%3A%2F%2Fpjo.org.pk%2Findex.php%2Fpjo%2Farticle%2Fdownload%2F471%2F403%2F HTTP/1.1” 200 18979 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
216.244.66.202 - - [31/Oct/2019:17:46:33 +0500] “GET /index.php/pjo/article/download/281/239/ HTTP/1.1” 200 220883 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:46:43 +0500] “GET /index.php/pjo/article/download/374/328/ HTTP/1.1” 200 87603 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:46:46 +0500] “GET /index.php/pjo/article/download/395/340/ HTTP/1.1” 200 293764 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:46:49 +0500] “GET /index.php/pjo/article/download/525/446/ HTTP/1.1” 200 109096 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:46:52 +0500] “GET /index.php/pjo/article/download/650/543/ HTTP/1.1” 200 165291 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
54.36.149.75 - - [31/Oct/2019:17:46:56 +0500] “GET /index.php/pjo/article/view/635/532 HTTP/1.1” 200 3647 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
216.244.66.202 - - [31/Oct/2019:17:47:03 +0500] “GET /index.php/pjo/article/download/723/599/ HTTP/1.1” 200 149835 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:47:48 +0500] “GET /index.php/pjo/article/download/762/629/ HTTP/1.1” 200 137883 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:47:56 +0500] “GET /index.php/pjo/article/download/764/631/ HTTP/1.1” 200 78075 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
216.244.66.202 - - [31/Oct/2019:17:48:00 +0500] “GET /index.php/pjo/article/download/814/667/ HTTP/1.1” 200 137691 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
54.36.150.59 - - [31/Oct/2019:17:48:23 +0500] “GET /index.php/pjo/article/view/229 HTTP/1.1” 200 14795 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
46.229.168.148 - - [31/Oct/2019:17:52:40 +0500] “GET /index.php/pjo/issue/view/49 HTTP/1.1” 200 16762 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
54.36.148.100 - - [31/Oct/2019:17:56:49 +0500] “GET /index.php/pjo/article/view/594 HTTP/1.1” 200 13093 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
216.244.66.202 - - [31/Oct/2019:18:05:40 +0500] “GET /index.php/pjo/article/view/430 HTTP/1.1” 200 14077 “-” “Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)”
54.36.149.74 - - [31/Oct/2019:18:06:07 +0500] “GET /index.php/pjo/article/view/483/413 HTTP/1.1” 200 3639 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
46.229.168.138 - - [31/Oct/2019:18:07:24 +0500] “GET /plugins/generic/pdfJsViewer/pdf.js/web/viewer.html?file=http%3A%2F%2Fpjo.org.pk%2Findex.php%2Fpjo%2Farticle%2Fdownload%2F604%2F508%2F HTTP/1.1” 200 18979 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
46.229.168.162 - - [31/Oct/2019:18:08:49 +0500] “GET /index.php/pjo/article/view/533/455 HTTP/1.1” 200 3679 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
63.143.42.252 - - [31/Oct/2019:18:16:33 +0500] “GET / HTTP/1.1” 302 - “http://www.pjo.org.pk” “Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)”
63.143.42.252 - - [31/Oct/2019:18:16:33 +0500] “GET /index.php/pjo HTTP/1.1” 200 17279 “http://www.pjo.org.pk” “Mozilla/5.0+(compatible; UptimeRobot/2.0; http://www.uptimerobot.com/)”
46.229.168.132 - - [31/Oct/2019:18:23:03 +0500] “GET /robots.txt HTTP/1.1” 200 32 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
46.229.168.137 - - [31/Oct/2019:18:23:04 +0500] “GET /index.php/pjo/article/view/188 HTTP/1.1” 200 14730 “-” “Mozilla/5.0 (compatible; SemrushBot/6~bl; +http://www.semrush.com/bot.html)”
142.16.22.21 - - [31/Oct/2019:18:23:35 +0500] “GET /index.php/pjo/article/view/64 HTTP/1.1” 200 14840 “https://scholar.google.ca/” “Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36”
–5c8d360b-A–
[31/Oct/2019:23:27:25 +0500] XbsnjYduO04ZjtjuXZUgAAAAAAg 66.249.65.206 46472 202.165.228.188 8080
–5c8d360b-B–
GET /index.php/pjo/article/view/102/78 HTTP/1.1
Host: pjo.org.pk
X-Forwarded-Host: pjo.org.pk
X-Forwarded-Port: 80
X-Forwarded-Proto: http
X-Forwarded-Server: pjo.org.pk
X-Real-IP: 66.249.65.206
Accept: /
From: googlebot(at)googlebot.com
User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)
–5c8d360b-F–
HTTP/1.1 200 OK
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: no-store
Set-Cookie: PHPSESSID=pmm93nnns6ojgkc9ivg3alkga5; path=/
Vary: Accept-Encoding,User-Agent
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
–5c8d360b-H–
Message: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-global”: Permission denied
Message: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-ip”: Permission denied
Apache-Error: [file “apache2_util.c”] [line 271] [level 3] [client 66.249.65.206] ModSecurity: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-global”: Permission denied [hostname “pjo.org.pk”] [uri “/cgi-sys/ea-php70/index.php/pjo/article/view/102/78”] [unique_id “XbsnjYduO04ZjtjuXZUgAAAAAAg”]
Apache-Error: [file “apache2_util.c”] [line 271] [level 3] [client 66.249.65.206] ModSecurity: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-ip”: Permission denied [hostname “pjo.org.pk”] [uri “/cgi-sys/ea-php70/index.php/pjo/article/view/102/78”] [unique_id “XbsnjYduO04ZjtjuXZUgAAAAAAg”]
Apache-Handler: cgi-script
Stopwatch: 1572546445016917 109313 (- - -)
Stopwatch2: 1572546445016917 109313; combined=747, p1=204, p2=297, p3=0, p4=0, p5=158, sr=65, sw=1, l=0, gc=87
Producer: ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/); OWASP_CRS/3.0.2.
Server: Apache
Engine-Mode: “ENABLED”
–5c8d360b-Z–
–43170465-A–
[31/Oct/2019:23:09:55 +0500] Xbsjc4duO04ZjtjuXZUfQAAAAAg 66.249.65.206 41546 202.165.228.188 8080
–43170465-B–
GET /index.php/pjo/article/download/173/146 HTTP/1.1
Host: pjo.org.pk
X-Forwarded-Host: pjo.org.pk
X-Forwarded-Port: 80
X-Forwarded-Proto: http
X-Forwarded-Server: pjo.org.pk
X-Real-IP: 66.249.65.206
Accept: /
From: googlebot(at)googlebot.com
User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)
–43170465-F–
HTTP/1.1 200 OK
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Accept-Ranges: none
Content-Disposition: attachment; filename=“173-Article Text-290-1-10-20180726.pdf”
Cache-Control: private
Pragma: public
Set-Cookie: PHPSESSID=6qdes05loah913e9idr6v1t6s6; path=/
Content-Length: 292513
Vary: Accept-Encoding,User-Agent
Content-Type: application/pdf
–43170465-H–
Message: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-global”: Permission denied
Message: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-ip”: Permission denied
Apache-Error: [file “apache2_util.c”] [line 271] [level 3] [client 66.249.65.206] ModSecurity: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-global”: Permission denied [hostname “pjo.org.pk”] [uri “/cgi-sys/ea-php70/index.php/pjo/article/download/173/146”] [unique_id “Xbsjc4duO04ZjtjuXZUfQAAAAAg”]
Apache-Error: [file “apache2_util.c”] [line 271] [level 3] [client 66.249.65.206] ModSecurity: collections_remove_stale: Failed to access DBM file “/var/cpanel/secdatadir/pjoorgpk-ip”: Permission denied [hostname “pjo.org.pk”] [uri “/cgi-sys/ea-php70/index.php/pjo/article/download/173/146”] [unique_id “Xbsjc4duO04ZjtjuXZUfQAAAAAg”]
Apache-Handler: cgi-script
Stopwatch: 1572545395646415 139367 (- - -)
Stopwatch2: 1572545395646415 139367; combined=769, p1=209, p2=300, p3=0, p4=0, p5=157, sr=57, sw=2, l=0, gc=101
Producer: ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/); OWASP_CRS/3.0.2.
Server: Apache
Engine-Mode: “ENABLED”
–43170465-Z–
–39b4757c-A–
[31/Oct/2019:23:44:23 +0500] Xbsrh2BBvTB4ypbVay9iRAAAAGU 39.40.6.56 51572 202.165.228.188 8080
–39b4757c-B–
GET /plugins/generic/pdfJsViewer/pdf.js/web/images/toolbarButton-print.png HTTP/1.1
Host: pjo.org.pk
Referer: http://pjo.org.pk/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html?file=http%3A%2F%2Fpjo.org.pk%2Findex.php%2Fpjo%2Farticle%2Fdownload%2F859%2F697%2F
X-Forwarded-Host: pjo.org.pk
X-Forwarded-Port: 80
X-Forwarded-Proto: http
X-Forwarded-Server: pjo.org.pk
X-Real-IP: 39.40.6.56
Accept: image/png,image/svg+xml,image/;q=0.8,video/;q=0.8,/;q=0.5
Cookie: PHPSESSID=9m84cbs9enmq1etf5cob29b7t4
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.1 Safari/605.1.15
Accept-Language: en-gb
–39b4757c-F–
HTTP/1.1 200 OK