\.log(?:[.-]\d)?(?:\.gz)?$|\.ini$|\.socket$|\.sock$|/error_log$|^/usr/share/cagefs-skeleton(?:$|/)|^/tmp/lshttpd/.+?\.sock$|^/tmp/lshttpd/.+?\.rtreport[.0-9]*$|^/usr/local/apache/domlogs(?:$|/)|^/var/log/(?:apache2?|httpd)/domlogs(?:$|/)|^/etc/(?:apache2?|httpd)/logs/domlogs(?:$|/)|^/var/ossec(?:$|/)|^/(home[1-9]?|var/www|var/imunify360/tmp)/\.restore-infected/.*(?:$|/)|^(?:/home)/(?:cagefs-skeleton(?:$|/)|[^/]+/\.cagefs/(?:var|opt)(?:$|/)|[^/]+/\.cagefs/tmp/php\w{1,8}|[^/]+/\.cl\.selector(?:$|/)|[^/]+/lscache(?:$|/)|\.imunify\.quarantined(?:$|/)|[^,]*/(?:mail|Maildir)/[^,]+,S=|[^,]*/mail/(?:[^,]+/)?storage/[um]\.[0-9]+|[^,]*/stats?/(?:[^,]+/)?(?:usage|site)_\w+\.html|[^,]*/(?:awstats|webstat|webalizer|analog|statsdata|awstats-data)/[^,]*\.(?:html?|pl|txt|bak|gz|cache|conf|data|log)(?:$|/)|[^,]*/webalizer\.current$|virtfs(?:$|/)|[^/]+/\.cpanel(?:$|/)|[^/]+/\.cphorde(?:$|/)|[^/]+/\.spamassasin(?:$|/)|[^/]+/\.subaccounts(?:$|/)|[^/]+/mail(?:$|/)|[^/]+/ssl(?:$|/)|[^/]+/logs/*\.log|[^/]+/logs/*\.gz|[^/]+/logs/*\.tar\.gz|[^/]+/tmp(?:$|/)|[^/]+/analog(?:$|/)|[^/]+/awstats(?:$|/)|[^/]+/cpbandwidth(?:$|/)|[^/]+/webalizer(?:$|/))