I get that - I wish I knew what PGL even was - I've never been associated with them and don't plan to (if they do, in fact, exist). Frankly, I don't care, I just want to get this sorted. I'm the only person with CP level access to my server (through my GSP) so I don't think that's an issue either. Mayhap I have to talk to them about it? I'm going to drop my pbsv.cfg on you, which should be straight from the automated tool:
;Auto Generated by PunkBuster Server
; Some of the following settings may not apply,
; consult manuals at evenbalance.com for full documentation
pb_sv_MsgPrefix "PunkBuster Server" //[PB Message Prefix (default=^3PunkBuster Client)]
pb_sv_MaxDlRate 4 //[KB/sec requested per file (default=4)]
pb_sv_MaxConDls 1 //[Concurrent downloads (default=1)]
pb_sv_KickLen 2 //[Minutes (default=2)]
pb_sv_CvarFreq 6 //[# of range checks per minute]
pb_sv_CvarLogging 1 //[1=Reg. Log, 2=Var Log, 3=Both, 0=Neither]
pb_sv_CvarWalk 1 //[0=disabled, 1-4=Walk through obtained Cvar lists]
pb_sv_CvarUserPulse 99 //[Frequency to auto-send CvarUser (minutes)]
pb_sv_CvarChangedPulse 99 //[Frequency to auto-send CvarChanged (minutes)]
pb_sv_CQC 1 //[0=No, 1=Yes (default=1)]
pb_sv_LogSync 0 //[0=No, 1=Yes (default=0)]
pb_sv_SsFloor 1 //[Low screenshot filename serial #]
pb_sv_SsCeiling 100 //[High screenshot filename serial #]
pb_sv_SsCmd "" //[Filename of system command to run after screenshots]
pb_sv_SsWidth 320 //[Requested pixel width of remote screenshots]
pb_sv_SsHeight 240 //[Requested pixel height of remote screenshots]
pb_sv_SsXpct 50 //[Percentage across screen for remote screenshots]
pb_sv_SsYpct 50 //[Percentage down screen for remote screenshots]
pb_sv_SsSrate 1 //[sample Rate for remote screenshots]
pb_sv_SsDelay 0 //[Maximum delay client waits before capturing screenshot]
pb_sv_SsPath "" //[Path where remote screenshots are saved]
pb_sv_AutoSsFrom 60 //[Min # of seconds to wait before requesting next ss]
pb_sv_AutoSsTo 1200 //[Max # of seconds to wait before requesting next ss]
pb_sv_AutoSs 0 //[0=No, 1=Yes (default=0)]
pb_sv_ssLogging 0 //[1=Reg. Log, 2=SS Log, 3=Both, 0=Neither]
pb_sv_ssTimeout 0 //[seconds]
pb_sv_Sleep 60 //[# of Milliseconds (default=60)]
pb_sv_PowerMin 10 //[Power Points]
pb_sv_PowerDef 1 //[Power Points]
pb_sv_PowerKickLen 5 //[Minutes (default=5)]
pb_sv_HttpPort 0 //[Port #]
pb_sv_HttpAddr "" //[External IP Address]
pb_sv_HttpRefresh 30 //[seconds]
pb_sv_HttpKey "" //[Key]
pb_sv_HttpMaps "" //[Map list (separate by spaces)]
pb_sv_ScoreKick 0 //[Min score (negative)]
pb_sv_ChangePeriod 999 //[seconds]
pb_sv_ChangeMax 1 //[Max name changes allowed]
pb_sv_DupNameGrace 0 //[seconds]
pb_sv_AutoUpdBan 1 //[0=No, 1=Yes (default=0)]
pb_sv_ExtChar 1 //[0=No, 1=Yes (default=0)]
pb_sv_GuidRelax 2 //[1=UNKN, 2=WRONGIP, 4=DUP (add desired values)]
pb_sv_RconReload 0 //[0=No, 1=Yes (default=0)]
pb_sv_HttpMapsPath "" //[Path where maps are loaded from in WebTool]
pb_sv_HttpColText1 "FFFFFF" //[Text Color #1 in WebTool (default=FFFFFF)]
pb_sv_HttpColText2 "0000FF" //[Text Color #2 in WebTool (default=0000FF)]
pb_sv_HttpColBack1 "000000" //
pb_sv_HttpColBack2 "808080" //
pb_sv_HttpColLine1 "FF0000" //[Line Color #1 in WebTool (default=FF0000)]
pb_sv_HttpColLine2 "0000FF" //[Line Color #2 in WebTool (default=0000FF)]
pb_sv_HttpColMsg "FF0000" //[Message Color in WebTool (default=FF0000)]
pb_sv_HttpShowGuid 0 //[0=No, 1=Yes (default=0)]
pb_sv_Restrictions 1 //[0=No, 1=Yes (default=1)]
pb_sv_FileWhitelist "" //[Folder Filename Filename ... Filename]
pb_sv_EmptyName 0 //[0=No, 1=Yes (default=0)]
pb_sv_LogFloor 1 //[Low log filename serial #]
pb_sv_MinName 0 //[Min Characters in Player name (default=0)]
pb_sv_MaxName 0 //[Max Characters in Player name (default=0)]
pb_sv_LanMask "" //[iP Address Mask for LAN Players (default=)]
pb_sv_Lan 0 //[0=No, 1=Yes (default=0)]
pb_sv_UpdateGrace 600 //[seconds to wait before Update Failure kick]
pb_sv_NoGuidGrace 1 //[seconds to wait before No GUID kick]
pb_sv_AliasFn "" //[Filename (default="pbalias.dat")]
pb_sv_AliasAutoLoad 0 //[0=No, 1=Yes (default=0)]
pb_sv_AliasMax 0 //[Max # of Aliases to track for each PB GUID]
pb_sv_AliasMaxEnforce 0 //[0=No, 1=Yes (default=0)]
pb_sv_load pbsvlog.cfg //load remote logging settings (if pbsvlog.cfg exists)
;Badname List - pb_sv_badname [grace_period_secs] [disallowed text]
;Cvar Range List - pb_sv_cvar [cvar_name] [type] [value(s)]
pb_sv_cvarempty
;PB UCON Settings / Lists
pb_sv_usessionlimit 8
pb_sv_ucontimeout 300
pb_sv_uconmaxsendrate 16
pb_sv_uconempty
pb_sv_uconadd 1 "208.122.49.138" "pbbhub1" "pbbanshub"
pb_sv_uconignoreempty
EDIT:
Reading over your first post - are you thinking it could be someone with a rogue RCON tool? The access admins have to my server is via ProCon, which has it's own remote layer that admins connect to, keeping them away from the actual server.
I'll also mention that I continue to get the error after an pb_sv_restart.